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PREFACE 


In February, 1965, Dr. Ernst Stuhlinger, Director, Research Pro- 
jects Laboratory (now Space Sciences Laboratory), initiated a 
series of Research Achievements Reviews which set forth those 
achievements accomplished by the laboratories of the Marshall 
Space Flight Center. Each review covered one or two fields of re- 
search in a form readily usable by specialists, systems engineers 
and program managers. The review of February 24, 1966, com- 
pleted this series. Each review was documented in the "Research 
Achievements Review Series. " 

In March, 1966, a second series of Research Achievements Reviews 
was initiated. This second series emphasized research areas of 
greatest concentration of effort, of most rapid progress, or of most 
pertinent interest and was published as "Research Achievements 
Review Reports, Volume II. " Volume II covered the reviews from 
March, 1966, through February, 1968. 

This third series of Research Achievements Reviews was begun 
in March, 1968, and continues the concept introduced in the second 
series. Reviews of the third series are designated Volume III and 
will span the period from March, 1968, through February, 1970. 


The papers in this report were presented July 2 5, 1968 


William G. Johnson 
Director 

Experiments Office 
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STATUS OF OPTIMAL CONTROL RESEARCH 


By 

James C. Blair 


SUMMARY 


This paper reviews the status of optimal control 
studies conducted by the Aero-Astrodynamies Labora- 
tory. The general status and applicability of optimal 
control theory are discussed, along with specific 
examples of the problem classes considered. Goals 
and direction of future work are indicated. 

INTRODUCTION 

The research on control systems done by the 
Aero-Astrodynamies Laboratory over the past few 
years has included a significant amount of study of 
optimal control theory development and application. 

This review summarizes the status of this research 
and describes some particular results obtained. 

An indication of what is meant by "optimal control" 
can be obtained by considering Figure 1, a flow chart 
for a control system design process which proceeds 
from vehicle and environmental descriptions and a 
set of control system objectives to the final control 
system design. This design process can take place 
by at least the two routes shown on the figure. "Con- 
ventional" design, shown on the left, involves hypoth- 
esizing a control system design, analyzing the system 
to see if the objectives have been met, and, if not, 
making an iteration in which another control system 
design is guessed and analyzed. This iterative 
process is repeated until a design is found which, in 
some sense, meets the control system objectives. 

The system is then modified to incorporate practical 
constraints, and finally is simulated to verify the 
performance of the control system. When an optimal 
control design procedure is followed, the control 
system objectives are formulated as a mathematical 
performance index which is to be minimized or 
maximized. This mathematical problem is solved 
analytically or computationally to find the unique 
control which provides the maximum or minimum. 

As in conventional design, the proposed optimal 
control is modified to incorporate practical consider- 
ations and finally is simulated to verify performance. 


This crude illustration, of course, does not include 
many complicated facets which are present in either 
design process. However , it should illustrate the 
primary difference between the two approaches; 
that is, conventional design with its iteration to meet 
the control system goals (sometimes subjectively 
defined) can yield a number of systems which may 
meet the goals, whereas optimal control design 
yields only one control system giving the maximum 
or minimum value of the performance index which 
represents the control system objectives. 

The remainder of the paper is in three major 
sections: initially, some comments are made about 
the general status and applicability of optimal con- 
trol theory, then Aero-Astrodynamies Laboratory’s 
research into specific areas of optimal control is 
discussed, and finally, goals and directions for 
future work are indicated. 


GENERAL STATUS OF OPTIMAL CONTROL 


Optimal control is a subject that has enjoyed 
a very great amount of theoretical activity over the 
past ten years or so. Being a relatively new field, 
its status is somewhat subject to diverse opinions, 
ranging from ( 1) a feeling on the part of some 
practicing engineers that the theory is of no practical 
use and is merely a mathematical toy, to another 
extreme, (2) the feeling on the part of some theore- 
ticians that optimal control is a complete theory and 
requires no further theoretical development for 
immediate and complete application to specific 
problems. Neither of these extremes is entirely 
correct; there are benefits and there are limitations 
to optimal control. In its current form, optimal 
control can be a useful tool for the practical control 
designer; yet, further theoretical developments could 
make optimal control more attractive as a design 
method. 
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VEHICLE AND ENVIRONMENT DESCRIPTION 
CONTROL SYSTEM OBJECTIVES 



CONTROL SYSTEM 


FIGURE 1. COMPARISON OF CONTROL DESIGN METHODS 

A number of benefits of optimal control are control systems could produce adequate results, 

listed in Figure 2, all of which do not necessarily optimal control theory can lead to a reduction of the 

apply to any given problem. The first benefit listed total design effort when compared with the iterative 

is the most obvious, in that, for certain complex design associated with conventional design procedure, 

problems, optimal control theory can be the only This is not to say that optimal control design is com- 

direct method for finding a solution which meets pletely free from iteration, but the iteration in 

the control objectives. This solution maximizes cases like this is often performed on the values or 

or minimizes the performance index which represents weighting coefficients within the performance index 
the control objectives. There may be no other way itself, so that the engineer can apply his judgment 

to find that unique control, or else finding it may at a higher level than would be required in iterations 

require an unreasonable amount of computational on specific designs for a conventional design process, 

effort. In another class of problems where the 

design requirements are less severe and where, A third benefit can be found in using the optimal 

for example, a number of conventionally designed value of the performance index as a standard against 
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BENEFITS 

1. ONLY DIRECT METHOD FOR OBTAINING BEST 

SYSTEM 

2. REDUCTION OF DESIGN EFFORT 

3. ESTABLISHING PERFORMANCE STANDARD 

4. PHYSICAL INSIGHT FOR COMPLEX PROBLEMS 

FIGURE 2. BENEFITS OF OPTIMAL CONTROL 

which suboptimal designs can be compared. This is 
a situation analogous to the use of optimal trajectories 
as a performance standard against which implemented 
guidance schemes can be compared. The fourth 
benefit listed is probably the least obvious, and yet 
it is one which some people feel to be the most 
important. This benefit is the physical insight 
which can be gained by observing the structure of 
the optimal control. This insight can augment the 
engineer’s judgment in selecting the proper set of 
sensors and incorporating the physical constraints 
which cannot be included in the performance index. 

For certain complex systems, the insight thus 
provided may be invaluable. 

On the other hand, there are limitations to opti- 
mal control which should be as clearly understood 
as are the advantages. Some of the important 
limitations are listed in Figure 3. The first item 
in Figure 3 means that each individual problem 
solution in optimal control is more complex than a 
single hypothesis -analysis iteration in conventional 
design. Storage limitations of available computers 
often can become a factor in problem formulation. 
However , when the totality of the iterative effort in 
conventional design is considered, quite often optimal 
control can result in a reduction in the total effort 
(as was mentioned in the discussion of the benefits) . 
Performance index formulation, the second item 
listed, is a limitation from two standpoints. First, 
there are factors affecting control design which are 
difficult to express in a mathematical performance 
index, for example, cost, confidence level in 
components, etc. These practical considerations 
have to be accounted for at a later point in the design 
process than is the case for conventional design. 
Second, there are certain physical problems which, 
when put into optimal control form, yield perfor- 
mance indices which are not amenable to solution. 

An example of such a performance index which had 
not yielded a solution until recently is given in the 
following paper on MINIMAX CONTROL by Mr. 

Jerome R. Redus. 


LIMITATIONS 

1. COMPLEXITY OF INDIVIDUAL PROBLEM SOLUTION 

2. PERFORMANCE INDEX FORMULATION 

3. PRACTICAL LIMITATIONS OF CURRENT THEORY 

• ANALYTICAL SOLUTIONS GENERALLY UNAVAILABLE 

• OPEN -LOOP CONTROL 

• SYNTHESIS 

• PARAMETER VARIATIONS 

FIGURE 3. LIMITATIONS OF OPTIMAL CONTROL 

Another area in which there are limitations to 
the applicability of optimal control is designated 
" practical limitations of current theory” in Figure 3. 
Examples of this class of problems are the following: 

( 1) Except for a few restricted classes of problems, 
analytical or closed-form solutions are generally 
unavailable, and the solution must be achieved through 
iteration on split boundary value problems by means 
of a computer. (2) Optimal control, in general, 
yields open -loop control; that is , the control is 
specified as a function of time as opposed to the 
desired feedback form which would be a function of 
state. (3) Even for problems where the optimal 
control yields closed-loop control, optimal control 
specifies feedback of every dynamical state of the 
system which, of course, would be impractical. In 
this ease the design engineer must use the specified 
form of optimal control els a means of augmenting 
his judgment in selecting realizable or practical 
sensor complements, filters , etc. (4) There is 
currently no satisfactory method of including in the 
initial problem formulation the information that the 
parameters of the system will not match the deter- 
ministic values used in problem formulations; con- 
sequently, the control should in some way include a 
compromise with the optimality of a deterministic 
system in order to achieve more satisfactory be- 
havior over a wider range of parameter variations. 

All of the limitations discussed in the preceding 
paragraph can be considered to be limitations which 
are imposed by the current state of the art of imple- 
mentation as compared with the theory as it stands 
today. For example, if computer capability is 
available onboard which is fast enough and reliable 
enough, the open-loop form of the optimal control 
could be computed iteratively in fast time to effecti- 
vely close the loop. Thus, for practical purposes, 
the limitation indicated here would be resolved. 


3 



JAMES C. BLAIR 


Similar comments can be made about the state of the 
art of sensor development and onboard identification 
as related to the synthesis and parameter variations 
problem. At the same time, theoretical deveLop- 
merits to relieve some of these current restrictions 
would hasten the broader application of optimally 
designed controllers. 

Lest the limitations be over -emphasized here, 
it might be well to state that the practicing engineer 
can obtain a definite benefit from using optimal con- 
trol despite its limitations and that the use of optimal 
control theory should be encouraged. 

AERO-ASTRODYNAMICS LABORATORY'S 
RESEARCH IN OPTIMAL CONTROL 

Figure 4 is a listing, in roughly chronological 
order, of some of the areas of optimal control in 
which research has been conducted by or supported 
by the Aero-Astrodynamics Laboratory over the 
past few years. The initial motivation for optimal 
control research within the Laboratory came from 
consideration of the launch vehicle control problem 
[ 1] , We have carried through this motivation to 
the present, but we also have expanded our scope of 
interest to include spacecraft control, as well as 
other aerospace vehicle control. Initial investi- 
gations into optimal control were made on the basis 
of trying to apply the theory to the launch vehicle 
control problem. Since optimal control theory was 
new at that time (in the early 1 96 0 f s), considerable 
effort was spent in trying to ”warp” the launch 
vehicle control problem into a form which would 
produce a readily solvable optimal control problem 
such as time -optimal control. Other than providing 
some background and experience, there was little 
direct benefit from this work. Another optimal con- 
trol problem which yields a direct solution is deter- 
ministic linear optimal control where the perfor- 
mance index is a quadratic function of state and 
control, yielding linear state feedback. While the 
direct application of a quadratic performance index 
does not directly reflect most of our control system 
objectives > linear optimal control does not fall com- 
pletely into this class of nonapplicable problems, 
because linear optimum control has proven to be 
useful as a tool in reducing the total design effort. 

As mentioned earlier, the design engineer can 
iterate on the parameters of the performance index, 
as opposed to iterating on the specific proposed 
design, and can thereby exercise a more powerful 
control over the system design than is possible with 
conventional design [ 2] . 


TIME - OPTIMAL CONTROL 
LINEAR OPTIMAL CONTROL 
MINIMAX 

• WORST DISTURBANCE 

• MINIMUM PEAK 

SYNTHESIS PROBLEMS 
PARAMETER SENSITIVITY 
STATISTICAL OPTIMAL CONTROL 
PARAMETER OPTIMIZATION 

FIGURE 4, AERO-ASTRODYNAMICS RESEARCH 

From this initial period of seeking easily solvable 
optimal control problems and attempting to force the 
launch vehicle control problems to fit these forms , 
the character of optimal control research within the 
Aero-Astrodynamics Laboratory evolved further. 

We began to ask the questions, n What is the nature 
of launch vehicle control objectives, and can these 
control objectives be fitted into an optimization prob- 
lem?” This viewpoint resulted in what we call 
"minimax” control, which is concerned with control 
for worst disturbances and/or minimization of 
response peak values. A brief discussion of the 
early work with references may be found in Reference 
3. The most recent minimax research efforts are 
discussed in the next paper in this review. 

Further evolution of the problem formulation 
resulted in development of some of the other study 
areas listed in Figure 4, particularly statistical 
optimal control. Meanwhile, work was continued on 
the problem of synthesizing a practical closed-loop 
system with realizable filters once the optimization 
problem had been solved. Also, a continuing effort 
has been concerned with solving the parameter varia- 
tion problem mentioned in the discussion of limitations. 
The remaining portion of this paper will be devoted 
to a more detailed discussion of two remaining 
areas: statistical optimal control and parameter 
optimization as applied to spacecraft control prob- 
lems. 
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STATISTICAL OPTIMAL CONTROL 

The original work in statistical optimal control 
in the Aero-Astrodynamics Laboratory was moti- 
vated by launch vehicle control but has since ex- 
panded to include other applications in different 
aerospace vehicles. The statistical formulation 
arose from the consideration that the wind {which 
is the primary influence on flight control design 
for a launch vehicle) is a statistical rather than a 
deterministic quantity, and thus a stochastic for- 
mulation of the control problem would seem very 
reasonable. However , it has been only recently 
that new techniques of wind measurement have 
allowed the collection of sufficiently complete wind 
data to permit confidence in a design achieved on 
a statistical basis. While there have been some 
earlier, simplified versions of dynamic statistical 
models for wind representation, the body of wind 
statistics information has been growing. A current 
contract with Hayes International Corporation has 
the purpose of developing an up-to-date model of 
the wind statistics to be used in control studies. 

Under the reasonable assumption that the wind is a 
Gaussian, Markovian process, a set of linear dif- 
ferential equations can be constructed such that, 
when the equation solutions are forced by white 
noise and summed with the mean value of the wind, 
the resultant output quantity has the same statistics 
as the wind statistics used to generate the time- 
varying differential equations. As indicated in 
Figure 5, this representation of the wind can be 
adjoined to a representation of the vehicle and control 
system dynamics. Under the assumption that the 
vehicle dynamics can be represented by linear varia- 
tional equations about the nominal trajectory and 
linear control, this total model can be driven by 
white noise, and the statistics of any given responses 
of the vehicle can be computed in a fairly straight- 
forward manner. Such a simulation could be used 
to evaluate a given proposed control system design 
or could be used as part of an iterative design 
process. 

Thus far, nothing has been said about optimiza- 
tion. It is likewise reasonable to form the launch 
vehicle control problem in the presence of a sto- 
chastic wind disturbance as a problem in statistical 
optimal control. Stating the control objectives 
directly would yield a performance index which 
would be the probability of failure of the vehicle 
during its flight, where failure of the vehicle can 
be considered to be an exceedance of any given 


constraint, such as structural strength limits or 
angle of attack and rate limits at the end of first 
stage flight, which affect the success of separation 
of the second stage. Ideally, we would then like 
to make use of this performance index in an optimal 
control problem so that the theory would yield a 
control system which would produce the minimum 
probability of failure. Unfortunately, this is not 
possible. It is not currently possible to compute 
the value of the probability of failure under the 
assumptions stated, much less find a control which 
minimizes that quantity. However, a significant 
contribution toward an approximation to this idealized 
problem has been made by Honeywell, Inc. , under 
contract to the Aero-Astrodynamics Laboratory 
[ 4,5] . In Figure 6, the idealized performance 
index, which is the probability of failure, is rep- 
resented by J. In the research work by Honeywell, 
Inc. , a new quantity represented by J v is shown 
to be an upper bound to J, and J* is a quantity which 
is computable. Therefore, if we can find the con- 
trol which minimizes J* and if the resultant value 
of J* is small enough, we can achieve a satis- 
factorily small probability of failure, J. The theory 
goes one step further and develops a third perfor- 
mance index, J* * , which is a quadratic form which 
will yield linear feedback control as described 
earlier in the discussion of linear optimal control. 
The parameters of J* * are adjusted so that the 
performance measure has the same first variation 
in control as does J* , and thus the control system 
which minimizes J** will also minimize J'*' . 

Since J* * is quadratic, the resultant problem is 
able to make use of the powerful linear control 
system theory which has been developed in obtaining 
a usable solution. 

In addition to the advantage of linearity as listed 
on Figure 7, the statistical optimal control approach 
yields physical insight into determining which 
quantities should be sensed and fed back, and aids 
the design engineer in arriving at a simplified 
design which will approximate the optimal system. 

At the same time, some questions can be raised. 
First is the question concerning the approximate 
nature of the problem, that is, do we find the control 
that truly minimizes J? Of course, the answer is 
"not necessarily. " However, in the applications to 
date, minimizing J* has produced a low enough 
value of J* that the assurance that J is lower than 
J* yields an adequate result. A second problem is 
that there is no systematic, analytical means of 
proceeding from the complete state feedback that 
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ASSUMPTIONS 

GAUSSIAN WIND 

VARIATIONAL EQUATIONS FOR THE VEHICLE 
LINEAR CONTROL 


MODEL 


WHITE 

NOISE 


MEAN 

WIND 



I 1 1 1 1 I 

I I 


ADJOINT SYSTEM 


RESPONSES 


RESULT 


STATE TRANSITION MATRIX AND MEAN WIND 
CONTAIN ALL STATISTICAL INFORMATION 


FIGURE 5. STOCHASTIC MODEL 


PERFORMANCE MEASURES 

J = PROBABILITY OF FAILURE 

J* = SUM OF EXPECTATIONS OF EXCEEDING CONSTRAINTS > J 
J** = WEIGHTED QUADRATIC FORM IN MEANS AND COVARIANCES 


APPROACH 

1. FIND WEIGHTS FOR J** SO THAT IT HAS THE SAME 
FIRST VARIATION IN CONTROL AS J* 

2. MINIMIZE J** 

FIGURE 6. STATISTIC A L O PTIMA L C ONTR OL - 
LINEARIZED SYSTEM 

is specified by the theory to a practically imple- 
mentable system with a reasonable number of \ 
sensors and feedbacks. Again, this is an area 
where the engineer’s judgment must be used. 
Despite the problems, it should be emphasized 


ADVANTAGES 

L J MEANINGFUL 

2. RESULTS IN LINEAR CONTROL 

3. YIELDS PHYSICAL INSIGHT INTO THE PROBLEM 

PROBLEMS 

1. IS J MINIMIZED ? 

2. ANALYTIC TECHNIQUES NOT AVAILABLE FOR 
SIMPLIFYING OPTIMAL CONTROL 

FIGURE 7. STATISTICAL OPTIMAL CONTROL - 
ADVANTAGES AND DISADVANTAGES 

that this particular statistical optimal control approach 
is a very powerful design tool and has been shown to 
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be applicable to various problems, for example, 
the launch vehicle application described earlier, 
as well as a gust alleviation control system for 
the B-52 airplane which is currently undergoing 
flight tests. It would also be applicable to a space- 
craft control problem where there is a dominant 
disturbance which is described by an additive 
Gaussian process, and the control objective can be 
expressed as a set of constraints which are not to 
be violated. 

PARAMETER OPTIMIZATION OF SPACECRAFT 
CONTROL 

Another area of optimal control that has been 
receiving recent attention is the application of 
optimization theory to spacecraft control system 
problems, particularly for the Apollo Telescope 
Mount (ATM) system. Figure 8 is a rough block 
diagram of the ATM system, which can be seen to 
be quite complex by realizing that the heavy blocks 
are complete control subsystems. The ATM system 
makes use of control moment gyros as a means of 
producing attitude control torques. The momentum 
management subsystem is the subject of a later 
paper in this review. The application of optimiza- 
tion theory has been investigated in two portions 


of this total system. First, in the area of momen- 
tum dumping, the problem of preventing control 
moment gyro momentum saturation is being formu- 
lated as an optimal control problem, under the con- 
straint that gravity gradient torques be used as a 
means of dumping the momentum. 

An application which is further advanced at this 
point is the use of parameter optimization to study « 
the combination of the control -moment-gyro control 
law and the telescope mount fine-pointing control 
system. A proposed design, which was arrived at 
by heuristic methods, serves as a basis or a nominal 
around which perturbations can be investigated. 

The use of this method of parameter optimization 
insures that the resultant system will be a feedback 
control system, a condition which would not be 
guaranteed if the total nonlinear problem were formu- 
lated. The objective of the study is either to verify 
that the existing system is truly the best system or 
to arrive at configurations which improve on the 
current system. The ATM control problem is a 
very complex one which includes many conflicting 
constraints so that it will be necessary to form a 
num ber of candidate perform ance indie es , de term ine 
the optimum control for each of these, and investi- 
gate the trade-offs involved. 




CONTROL SUBSYSTEMS 


LOGIC SWITCHES BETWEEN MOOES OF 
OPERATION NOT SHOWN 


FIGURE 8. APOLLO TELESCOPE MOUNT CONTROL SYSTEM 
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Under a support contract, Lockheed Missiles 
and Space Company, Huntsville, Alabama, is 
developing a hybrid computer simulation which will 
make use of the parameter optimization method to 
study this problem. As shown in Figure 9, the 
dynamics of the vehicle and control system and 
the performance measure evaluation are done on 
the analog portion of the computer and the optimiza- 
tion technique is accomplished on the digital portion. 
The optimization technique being used here is a 
second order gradient technique. The hybrid com- 
puter seems especially well suited for this type of 
problem, and a secondary objective of the study is 
to prove the usefulness of the hybrid simulation 
technique for complex optimization problems of this 
nature. 


CONCLUSIONS AND FUTURE DIRECTION 


In summary, optimal control is currently a 
very beneficial design tool which can augment, rather 
than replace, the engineer’s judgment, and its use- 
fulness is more likely to increase than to decrease 
as further developments in the state of the art of 
hardware implementation occur. In the Aero- 
Astrodynamics Laboratory, an evolution in our 
optimal control research parallels the changes in 
the general field of optimal control, in that emphasis 
has been shifted from problems more directly 
solvable in closed form to those which either better 


d, DISTURBANCES 




* DAVIDON- FLETCHER -POWELL 
METHOD OF CONJUGATE GRADIENTS 


FIGURE 9. HYBRID SIMULATION OF PARAMETER OPTIMIZATION 
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reflect the control design objectives and constraints 
or provide more general solutions, even though 
more computation is required. We expect this 
maturing process to continue. In our future 
research, we intend to continue to apply optimal 
control theory to specific vehicle problems and to 
encourage such applications of the theory. We also 
expect to continue the theoretical developments 
indicated in Figure 10, both in the extension of 
theory to include other performance measures of 
practical interest and In the area described earlier 
as "practical limitations of current theory" in which 
we will seek systematic means of incorporating 
practical constraints and arriving at systems which 
are implementable while using optimal control 
theory as a basis for design. Finally, a future goal 
is to seek ways of including information concerning 
vehicle parameter variations into the initial design 
of the control system so that the optimal control is 
optimal in the sense that it accounts for the range 


of expected parameter values and does not ignore 
this significant piece of information. 

FUTURE GOALS 

APPLICATION TO SPECIFIC PROBLEMS 
EXTENSION TO OTHER PERFORMANCE INDICES 
INCORPORATION OF PRACTICAL CONSTRAINTS 
SYNTHESIS METHODS 
PARAMETER VARIATIONS 

FIGURE 10. FUTURE GOALS OF 
AERO-ASTRODYNAMICS LABORATORY’S 
RESEARCH 
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MINIMAX CONTROL 


By 

Jerome R. Redus 


SUMMARY 


A basic optimization technique has been devel- 
oped for a class of optimization problems not pre- 
viously amenable to solution. The technique 
minimizes the peak value of a function of the current 
state of the system, no matter when that peak occurs. 
The method of solution is outlined in this paper and 
areas of current research are noted. 

INTRODUCTION 

In an optimal control problem, we are given a 
description of the motion of the plant or object 
being controlled, 

x = ^ x = f(x,t,u) , 

where x is the state of the plant and t the time; the 
initial conditions of the plant, (x 0 , t 0 ) ; a set of 
acceptable final conditions (x^, T) described by the 

terminal manifold, T(x t> T) = 0; and a set of 
admissible control functions u c U. 

It is assumed that there are several controls 
u(t) or u(x,t) cU which are satisfactory in the sense 
that they all can transfer the plant from its initial 
conditions (x 0 , t 0 ) to acceptable final conditions 
(x^, T) e T (x T , T) , and we are asked to find, from 

among the set of satisfactory controls , that control 
which also minimizes some scalar function of the 
plant motion, or trajectory, in going from (x 0 ,t 0 ) 
to some (x T , T)eJ (x T , T) . The function to be 

minimized, J(x 0 , t 0 ;u) , depends on the control and 
initial conditions, since these determine the tra- 
jectory. 


Most optimization problems considered in the 
past have been of either the Mayer type where the 
function to be minimized is evaluated only at the 
final time, 


J(x 0 ,t 0 ;u) = M(x t ,T) ; 

of the Lagrange type where the function is an inte- 
gral over the entire trajectory, 

T 

J(x p , t 0 ; u) = J L(x, t, u) dt ; 
to 

or of the Bolza type, a combination of the above 
two. These three problems can be shown to be 
equivalent and can, at least conceptually, be solved 
by any one of a number of means, A key feature 
is that the function needs to be evaluated only at 
the final time T, by virtue of their equivalence, 
and we know ahead of time at which time the function 
needs to be minimized. 

In opposition to this, the problem which is being 
considered here is that of minimizing the peak value 
of a function of the current state of the system, no 
matter when that peak occurs , 


J(x 0 ,t 0 ;u) = max C(x,t) . 1 - 
t 0 ^t<T 

The problem is to find the control u 0 eU minimizing 
the peak value ( maximum value) of C(x,t) ingoing 
from (x 0 ,t 0 ) to (x t ,T), 


u 0 = Arg min max C(x,t) . 
ueU t 0 <t<T 


1 . Since the peak value can occur anywhere, it takes some extremely artificial mathematics to convert this 
to a problem of minimizing the final value of a function. The artifices that could be employed would upset 
the use of the usual optimization procedures for this problem. 
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Hence, the name minimax control . To differentiate 
between peak-value minimization and some game 
theory optimization problems, this problem is 
called a C -Minimax optimization problem. 

The need to minimize the peak value of some 
function of the state of the system can arise in a 
number of physical situations, for example, mini- 
mizing the peak bending moment over the trajectory 
at a critical point on a launch vehicle, minimizing 
the peak pointing error of a photographic satellite, 
etc. The need for a theory to handle this class of 
problems was recognized by personnel at MSFC 
and the basic optimization procedure was developed 
by Dr, C. D. Johnson of the University of Alabama 
in Huntsville. The theory is treated rigorously in 
Reference 1; this paper presents a simplified 
explanation of how the optimization procedure works 
and indicates the direction of future research. 

BASIC NOTIONS 


Since 

J(x 0 ,t 0 ;u) = max C(x,t) , 
t 0 <t<T 

it is clear that 


J(x 0 , t 0 ;u) a C(x 0 ,to) . 

Assume that the initial conditions are such that there 
are several satisfactory controls which have the 
property that 

C = -I; C s 0 
dt 

everywhere along the trajectory from (x 0 , t 0 ) to 
(x T) . For each of these controls, max C(x, t) , 

’ t 0 <t^T 

the peak value of C, occurs at the initial conditions and 


J(x 0 ,t 0 ;u) = C(x 0 , t 0 ) , 

which is the best that we can hope to do. Clearly, 
each one of these controllers is an equally optimum 
controller, and not only are there several satis- 
factory controls in the sense defined previously, 
the optimum control is not unique for this set of 
initial conditions. - If, for another set of initial 
conditions, every satisfactory controller performs 
such that J(x 0 , t 0 ; u)> C(x 0 , t 0 ) , (that is, the peak 
value occurs after the initial time) , then we would 
appear to have a unique optimization problem, at 
least until the time that the peak has occurred. Al- 
though these are heuristic notions, they are impor- 
tant, because they form the basis on which C -Mini- 
max theory works, as will become clear in the next 
section. 

SOLUTION TO C-MINIMAX PROBLEMS 

We are given the usual equations of motion, initial, 
and final conditions. The control u is contained in 
a set U of bounded, sequentially compact, piece- 
wise continuous controls.- The task is to minimize 

J(x 0 ,t 0 ;u) = max C(x, t) >C(x 0 ,t 0 ) ... 

t 0 ^t<T 

Based on what was said in the last section, we 
divide the state space into two classes of regions: 

R 0 : ( x o> *o) is such that there exists one or more 
satisfactory controls such that 
J(x 0 ,t 0 ;u) = C(x 0 ,t 0 ) „ 


R : (x 0 , tg) is such that, for all satisfactory 
controls, 

J(x 0 ,t 0 ;u) > C(x 0 , t 0 ) . 


In the process of conceptually building up these 
regions, we obtain the solution to the peak minimi- 
zation problem. 


2. It is this non -uniqueness that causes difficulties in directly applying the usual optimization procedures, 
which work well with Mayer and equivalent problems, to this problem. 

_3_. Boundedness is obviously required physically. It also keeps the control from always exerting enough effort 
to make J(x 0 ,t 0 ,u) = C(x 0 , t 0 ) for all initial conditions (Le. , boundedness makes the problem interesting). 

The other requirements are physically reasonable and convenient. 
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Consider first a subspaee of the R 0 space, 
denoted Rq 1 . Rq is such that for every point in Rq 
there exists at least one control leading to the 
terminal manifold such that C ^ 0 all the way to the 
terminal manifold (like the example under BASIC 
NOTIONS) , Typical time histories of C versus t are 
shown in Figure 1, along with the properties of the 
region Rq 1 . Formally, the terminal manifold may 
be considered to be in or on the boundary of Ro 1 . 
Hence, any trajectory going to the terminal mani- 
fold must pass through the boundary of Rq 1 , denoted 
aRo 1 . Suitable controls in the Rq 1 region may be 
found by any one of several means, including back- 
ward time flooding, as discussed in Reference 2. 



C ( x , t ) < 0 EVERYWHERE ALONG THE TRAJECTORY 



MAXIMA 


dRj: THE BOUNDARY OF Rq 

* T . t) = rJ, 

ANY TRAJECTORY MUST PASS THROUGH r1 


FIGURE 1. PROPERTIES OF THE Rq 1 REGION 


Consider now a point outside of Rn 1 in an R 

m 

region but sufficiently close to Rq 1 that C > 0 for all 
points between (x 0 , t 0 ) and aRo 1 for all controls 


ucU leading to <T (x^, T) A For all trajectories 

emanating from that point and passing through the 
boundary of Rq 1 (to reach the terminal manifold) , 

C > 0 all the way to BRq and it is known that one can 
find controls such that C ^ 0 from the boundary on in. 
Hence, the peak value occurs on the boundary of 
Ro 1 , aRo 1 , and we can introduce an auxiliary optimi- 
zation problem — one of minimizing the "final value” 
of C(x,t) in transferring the state (x 0 , t 0 ) to the 
"terminal manifold, " BRq 1 . This subsidiary prob- 
lem is exactly a Mayer-type problem for which 
optimization techniques are well known . 


These points, being in an R^ region, are such 

that J(x 0 , t 0 ; u) > C(x 0 , t 0 ) . They have one interior 
maximum on a plot of C versus t and are thus said to 
belong to an R^ 1 region. Although it is difficult to 

set forth, a little consideration on the reader’s part 

will allow him to recognize that for any initial point 

in the R 1 region, 
m 

max C(x,t) - COR 0 ) 
t 0 <t^T 

for optimal control, and the optimum control is found 

by solving the Mayer problem in going to aRo . The 

boundary of R 1 , 8R 1 , is characterized by C(3R V) 

J m 5 m m 

= CORq 1 ) with optimal control. These arguments 

and typical plots of C versus t for trajectories 

starting in the R 1 region are summarized in 

Figure 2. 

Consider next a point outside of R^ and Rq 1 . 

Assume initially that it is close to the boundary of 

R 1 and further assume that it is in an R 0 region, 
m 

Since it is in an R 0 region, there must be controls 
such that C > 0 at least initially. However, since 
it is not in Rq 1 , C is not nonpositive all the way to 
the terminal manifold, and there must be at least 
one interior relative maximum in a plot of C versus 
t. We conclude that it must pass through an R^ 

region. A suitable control policy is to choose any 
control which will take the trajectory to aR^ 1 such 

that C ^ 0 all the way to the boundary of R^ 1 , follow 


For points infinitesimally outside the boundary of Rq 1 and in an R^ region, it must be true that at those 

points C > 0 V ueU leading to the terminal manifold or else the points would be on the boundary or interior 
to Rq 1 , 
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1 ASSUME 

(x 0 , t 0 ) 

4 Rjj, SUFFICIENTLY 

2. EXTEND REGION R'J, UNTIL 

CLOSE 

TO aRj 

THAT C > 0 r ueU 

C(x 0 , t 0 ) = C( dR^) 


MUST GO UPHILL ALL THE WAY 
UNTIL REACH dRj, ; C max OCCURS 
ON dRj 

OPTIMIZATION PROBLEM: 

MAYER TYPE - 

MINIMIZE "FINAL VALUE " OF 
C IN TRANSFERRING TO 
"TERMINAL MANIFOLD" 


C 



t 


FIGURE 2. CONSTRUCTION OF THE R 1 REGION 

m 


the optimal control policy for that point on BR^ 1 

across R 1 so that 
m 


CORq 1 ) = COR^) ^ C(x 0 ,t 0 ) , 


and follow any suitable control policy in Rq 1 . The 
boundary of R 0 2 is analogous in its properties to the 
boundary of Rq 1 . 


If we are outside of fin 1 , R 1 , R n 2 , and close to 
u m u ’ 

the boundary of R 0 2 , we can again argue that we are 
in an R^ region and we have a Mayer problem in 


going to BR 0 2 , the boundary of R 0 2 . Abbreviated dis- 
cussions of these regions and plots of C versus t are 
shown in Figure 3. 

The whole process can be continued until the 
state space of interest has been covered and all of 
the regions occurring for the given problem have 
been identified. It is interesting to note that, for the 
R^ type regions, the peak value of C (x, t) always 

occurs at the first passage of the trajectory into 
an R 0 region. 

In the example problem shown in Figure 4, tne 
plant is a so-called "double integrator, " the control 
is bounded by unity, and the terminal manifold is 
Xj = x 2 = 0. The optimization problem is to minimize 

the peak value of x 2 . ^ The Rq 1 , Rq , and R^ 1 regions 


5. or equivalently, minimize the peak value of C(x) = lx* I , or in general C(x) “ IxJ^, v > 1. 
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C < 0 EVERYWHERE TO 
BOUNDARY dR^ 


*m 

MAYER PROBLEM TO 0Rq 



t 



t 


AND SO FORTH 

FIGURE 3. PROPERTIES OF THE REGIONS OF HIGHER RANK 


are shown, as are curves of constant cost, where 
V(x) = J(x 0 , u 0 ) . 

One possible realization of the control is 
u 0 = -sgn { xj + J |x 2 1 x 2 ] 


as shown on the illustration. Another is 

u 0 = -sgn [Xj + \ :|x 2 | x 2 ] . 

A trajectory for the latter law is shown in the 
illustration starting at point ( -3. 75, 3. 4) . 

Two other examples are treated in Reference 3. 
For those examples, the optimum control and 


6. hi the oral presentation, some time was spent on physical arguments as to why the Rq 1 and R^ regions occur 
where they do. The same physical reasoning can be extended to solving the whole problem with pencil and 
paper and without recourse to formal optimization procedures. This will lead to an initial postulated control 
law of 

u 0 = -sgn [xj + I |x 2 | x 2 ] in R 0 * 

= -sgn x 2 in R^, R 0 2 

which is equally optimum to the two given above, again demonstrating the non-uniqueness of the control. 
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EXAMPLE 




FIGURE 4. EXAMPLE PROBLEM 


performance are demonstrated and the results are 
compared with the performance of subopt imal control 
systems designed by other methods. 

A general computer algorithm has been devised 
which identifies the various regions of state space 
for a given problem and simultaneously solves for 
the optimum control where the optimum control is 
unique, i. e. , in the regions. The algorithm is 

described in Reference 2. 

A basic feature of the algorithm is that it floods 
the state space in backward time in order to identify 
the various regions. This feature is quite analogous 
to the direct application of Bellman’s Principle of 
Optimality and suffers from an analogous ’’curse of 
dimensionality. ” This feature is not necessarily 


bad if we are trying to flood the state space to com- 
pare the optimum solution with candidate suboptimal 
controllers for several initial conditions. Also, 
the ’’curse” is not as severe as for some applications 
of Bellman’s Principle, as the algorithm proceeds 
straightforwardly in backward time without any 
iteration on a given trajectory. Nevertheless, we 
still have some visualization and flooding difficulties 
in high-dimension space. 

FUTURE RESEARCH 

Because the current computational methods are 
not without drawbacks, planned research is directed 
towards obtaining analytic solutions for common 
general classes of problems, for example, those 
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problems for which the plant is adequately described 
by a set of deterministic linear autonomous differential 
equations . 

Research is also being conducted on finding 
alternate means of solution for problems where there 
is only one set of initial conditions of interest, and 
the backward time flooding would desirably be eli- 
minated . 


Another problem currently being considered is 
that of minimax control in the presence of incom- 
pletely specified disturbances. Two approaches are 
being considered, a stochastic formulation and a 
formulation in which the disturbance is of a speci- 
fied functional form with specified bounds on the 
functional parameters. 
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DIGITAL THRUST FILTERING 


Bj 

William H. Walker 


SUMMARY 


Saturn launch vehicle guidance requires that 
measured thrust data be processed on a real time 
basis during flight. A digital filter is used to smooth 
the raw thrust data before they are used by the 
guidance system. Conventional digital filter designs 
do not provide satisfactory responses to steps in 
the input signal that may be caused by engine mixture 
ratio shifts or engine malfunctions. A new type of 
digital filter has been designed for this service. 

The new filter design is largely the result of heuristic 
and experimental work and exploits both the logical 
and arithmetic capabilities of digital computers. 

This filter uses a simple statistical scheme to detect 
step changes in the input signal level which will 
trigger the logical modification of the filter algorithm 
permitting the filter to respond very rapidly to input 
steps . 

DIGITAL THRUST FILTER 

Saturn launch vehicle guidance requires that 
measured thrust data be processed as a real-time 
input. Digital thrust data are derived from sampled 
accelerometer outputs by digital computation. The 
raw digital thrust data are noisy and must be filtered 
before use by the guidance system. A simplified 
schematic of the thrust data system is shown in 
Figure 1, This paper is concerned with the digital 
filter which is implemented as a stored program in 
the launch vehicle digital computer. This digital 
filter must, of course, operate in real time. 



FIGURE 1. SYSTEM SCHEMATIC 


The data sampling rate is rather low with the 
sampling interval being on the order of two seconds. 

The digital filter input has the following characteristics: 

1. It is essentially a constant level signal with 
additive Gaussian noise. 

2. The signal may change level in a steplike 
manner as a result of engine mixture ratio shifts or 
engine malfunctions. 

Qualitative digital filter performance requirements 
are: 

1. The filter must provide good noise suppres- 
sion during constant signal level operation. 

2. The filter must respond rapidly to steps in 
the input signal level. 

3. The filter must be suitable for programming 
on the launch vehicle digital computer. 

FILTER DESIGN 


The filter performance requirements for good 
noise suppression and fast step response are difficult 
to meet using conventional linear filters. Digital 
simulations using several conventional and Kalman 
filter designs led to the conclusion that simple linear 
filters were satisfactory for constant signal level 
operation, but a new development was needed to give 
the des ir ed s tep response . Further appr ais al of the 
filter performance requirements suggested the pos- 
sibility of using some programmed logic to switch in 
a special filter during input signal level steps. The 
critical problem in this approach is the detection of 
a step in the input s ignal. 

STEP DETECTION 

The detection of a step in the input signal can be 
considered to be a problem in pattern recognition. 

A frequent approach in developing computer pattern 
recognition programs is to try to determine how a 
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human would perform the pattern recognition task time, the mask was moved to the right, exposing one 

and then attempt to program this procedure. Small new data point. At each sample time, the experimen- 

scale paper -and-pencil experiments indicated that tal subject would express an opinion as to the presence 

this approach had some interesting possibilities. or absence of a step in the input signal level. 

A data generator computer program was written to 

provide a ready supply of unbiased data for pattern A few step detection experiments indicated that 

recognition experiments. The data were produced in experimental subjects armed with at least an elemen- 

graphical form by using a line printer as a plotter. tary background in statistics would tend to set up a 

Figure 2 is part of a typical synthetic data record. tolerance band about the estimated mean value of the 

The data points, plotted with asterisks, have been signal and declare a step present whenever a raw 

manually connected with straight lines for illustrative data point fell outside the tolerance band. With the 
purposes. The background grid of plus signs is tolerance band set at the mean plus -and- minus -three 

printed to provide a reference framework. noise standard deviations, this scheme is similar to 

the commonly used quality control chart. An esti- 

Step detection experiments were conducted by mated mean signal level and the tolerance limits are 

masking off the data record from the right and letting shown in Figure 2 near the start of the downward step, 
the person acting as the experimental subject view This step detection procedure suffers from a defect 

only the historical data. At each simulated sample in that wild data samples will often be misinterpreted 


4 - 4 - 4 4 



4 4 - 4 ■f 


FIGURE 2. SYNTHETIC DATA RECORD 
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as the start of a step. False alarm protection can 
be purchased by delaying the decision on a step at 
least one more sample time. A simple decision 
rule, such as requiring two consecutive raw data 
samples to fall outside the tolerance band, proved 
to be quite effective in discriminating between true 
signal steps and wild data points. 

STEP DECISION RULE 

The step detection decision rule actually adopted 
is slightly more complicated. This rule uses two 
tolerance bands centered about the estimated signal 
mean value as shown in Figure 3. The inner tolerance 
band is set at plus-and-minus-two noise standard 
deviations and the outer tolerance band is set at 
plus -and-minus -four noise standard deviations. A 
cumulative tolerance exceedance count is kept and 
is incremented by the values shown in Figure 3. 

The cumulative exceedance count and the exceedance 
count increments are signed numbers with the sign 
indicating the polarity of the exceedance. The cumu- 
lative exceedance count is reset to zero whenever a 
raw data sample falls inside the inner tolerance band 
or whenever the sign of the exceedance count differs 
from the sign of a nonzero exceedance increment. 

This procedure means that, when consecutive ex- 
ceedances of alternating polarity occur, only the 
most recent exceedance will be remembered. The 
step detection decision rule is as follows: A step is 
declared to be present whenever the magnitude of 
the cumulative exceedance count is three or more. 
Note that the cumulative exceedance count is not 
reset when a step is detected and the filter may 
therefore be in the "step present" mode for several 
consecutive sample times. 


heavily than older data when estimating the mean 
signal level. This sort of unequal weighting allows 
the filter to track a signal that has minor variations 
in signal level so that the level variations are not 
large enough to be considered as step changes. 

The well-known exponential digital filter provides a 
convenient mathematical formulation for digital 
filtering with the most recent data receiving more 
weight than older data. The computational equation 
for the exponential filter is 


s n““ 


r n + (1 


where is the N smoothed data sample, R^ is 

the N** 1 raw data sample, is the N-l St smoothed 

data sample, and a is a positive constant less than 
one. The constant, a, establishes the filter perfor- 
mance with the usual values of a falling in the approxi- 
mate range 0. 3 to 0. 01. Small values of a give good 
noise suppression for constant level signals and slow 
step response. Larger values of a give faster step 
response and less noise suppression for constant 
level signals. The exponential filter is very convenient 
from a digital computer programming point of view 
because the required computation per data sample is 
merely two multiplications and one addition. The 
only data storage requirement is that the smoothed 
data sample from the preceding sample time must be 
saved. The exponential filter computational equation 
is a recursive relation that makes some special 
procedure necessary at start-up time. A common 
practice is to preload the ^ data storage location 

with an estimated value of the signal level. 


+ 2 



- 2 


FIGURE 3. PAIR OF TOLERANCE BANDS 


EXPONENTIAL FILTER 

The experiments, using human subjects for the 
digital filter, indicated that there is a natural tend- 
ency for humans to weight the most recent data more 


Additional insight into the operation of the expo- 
nential filter may be gained by expanding the recursive 
computational equation in terms of the raw data 
samples. The expansion is 



where R is the preloaded initial condition. This 
° th 

equation shows that the N smoothed data sample is 
a linear weighted combination of all preceding raw 
data samples with the weights decreasing with raw 
data sample age. The name of the exponential filter 
is derived from the exponential term under the sum- 
mation sign. Notice in particular that the exponential 
filter effectively remembers something about all of 
the raw data samples that have been processed. 
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The exponential filter appears to be satisfactory 
for use in the thrust filtering problem during periods 
of constant signal level operation. The exponential 
filter constant, a, can be adjusted to provide satis- 
factory noise suppression, and the light computational 
and data storage requirements are ideal for real-time 
use. Re-examination of the typical synthetic signal 
in Figure 4 indicates that the filter operational mode 
may be broken down into phases as shown. The 
exponential filter provides a satisfactory technique 
for the constant signal level phases, but it is difficult 
to use during the initialization and step phases. 

During the step phase, it is desired that the filter 
track the step rapidly and also provide some low pass 

+ + ■+ + ■♦» 


filtering action. It is also desirable for the filter 
to discard all knowledge of the signal level before 
the start of the step. A very simple scheme that 
meets both of these objectives is to have the filter 
output consist of just the simple average of the last 
two raw data samples during the step phase. This 
procedure will provide fast step tracking with some 
low pass filtering action and also effectively discard 
knowledge of the signal level that existed before the 
step. 

VARIABLE EXPONENTIAL FILTER 

Modifying the exponential filter to allow the filter 
parameter a to be a function of time will provide a 

+ + + ■++ . 
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workable scheme for filter initialization. The 
modified exponential filter equation is 

S n = «( , ).R n t-(l - 0f(t)).S N1 . 

The rule for the variation of o?(t) should be chosen 
so that the numerical values smoothly decrease with 
time while the filter is in the initialization phase. 
Following initialization phase, a( t) should have a 
constant value for constant signal level operation. 

A simple functional form for <a(t) is 

a(t) = 1/M , 

where M is an integer defined by 


M = N - N + 2 
X 

with the condition 


In these expressions, N is the current data sample 
serial number, N is the data sample serial number 

of the last sample for which the filter was in an in- 
put signal step mode and is a constant that 

sets the value of a. for constant signal level operation. 
This time variation of a will provide rapid conver- 
gence of the filter output to a good estimate of the 
signal level following a step and during initial start- 
up. 

FILTER ALGORITHM 

The necessary components for constructing a 
filter algorithm have been discussed. The flow chart 
of the filter algorithm in Figure 5 is intended to 
illustrate the mathematics and logic involved rather 
than an actual computer program. The chart is com- 
plete except for the details of preloading and original 
start-up of the filter. Since these details are best 
discussed in terms of an actual computer program, 
they will not receive further consideration here. 

A detailed description of each numbered box in 
the flow chart is given below: 

Box 1. The "error” signal, E, is calculated 
from the current raw data sample, R^, and the best 


available estimate of the true signal level given by 
the smoothed data sample from the preceding 
sample time, ^ 

Box 2. An integer called LI is calculated from 
the sign of the cumulative tolerance exceedance 
count, Q, and the sign of E. Integer arithmetic is 
used. If the signs of Q and E are opposite, Li will 
have the value zero; if they are the same, LI will 
have the value one. 

Box 3. An integer called L2 is calculated from 
E and the tolerances T1 and T2. Integer arithmetic 
is used. The minimum functions limit the value of 
L2 to zero, one, or two. L2 is the magnitude of the 
tolerance exceedance incremental value for the 
current raw data sample. If the raw data sample 
falls inside the inner tolerance band, L2 will be 
zero. If the raw data sample fails between the two 
tolerance bands, L2 will be one; if it falls outside 
the outer tolerance band, L2 will be two. 

Box 4. The cumulative exceedance count, Q, 
is incremented. The first term on the right effec- 
tively retains or discards the previous value of Q 
since Li only takes on the values of zero or one. 

The second term on the right attaches the proper 
sign to the magnitude of the tolerance exceedance 
increment, L2. 

Box 5. The value of the tolerance exceedance 
increment, L2, is tested and then the program flow 
branches. If L2 is zero, the raw data sample fell 
within the inner tolerance band and the flow goes to 
box 6; otherwise, the flow goes to box 7. 

Box 6, The raw data sample is within the inner 
tolerance band. The cumulative tolerance exceedance 
count, Q, is set to zero, and the flow goes to box 10. 

Box 7. The raw data sample is not within the 
inner tolerance band. The magnitude of the cumu- 
lative tolerance exceedance count, Q, is tested. If 
the magnitude of Q is less than two, it means that 
the current raw data sample fell between the toler- 
ance bandstand the preceding raw data sample was 
either in tolerance or had a tolerance exceedance 
of opposite polarity. In the ease at hand, the toler- 
ance exceedance is merely noted, and the flow goes 
to box 10. If the magnitude of Q is equal to two, the 
situation is that either ( 1) the last two consecutive 
data samples have fallen between the tolerance bands, 
or (2) the last data sample fell outside the outer 
tolerance band and the previous data sample was 
either in tolerance or the exceedance was of opposite 
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FIGURE 5. FILTER ALGORITHM 


polarity. This is the possible wild data point con- 
dition with the flow going to box 8. If the magnitude 
of Q is greater than 2, the decision rule declares 
that a step in the input signal is present. This con- 
dition may be caused by three or more consecutive 
raw data samples falling between tolerance bands 
all with the same polarity, or two or more consec- 
utive raw data samples falling outside the outer 
tolerance all with the same polarity, or some com- 
bination of consecutive raw data samples having 
tolerance exceedances split between the two tolerance 
bands with all exceedances of the same polarity. 

The flow goes to box 9. 

Box 8. A possible wild data sample or start of 
a step condition exists. The decision rule requires 
that action be delayed until the next sample time and 
the best available estimate of the signal level, which 
is the output data sample from the preceding sample 


time, be used for the filter output. The flow by- 
passes the main smoothing computation and goes 
to box 11, 

Box 9. A step in the input signal level is 
present. The output data sample will be forced to 
he the simple average of the last two raw data 
samples. The procedure is to set the filter coef- 
ficient control parameter, M, to two and to make 
the substitution shown for the value of the output 
data sample at the preceding sample time. This 
substitution is necessary because the main smoothing 
computation uses the value of E calculated in box 1. 

Box 10. This is the main smoothing computa- 
tion. The variable filter coefficient is calculated 
by the first line. The second line is the actual 
smoothing computation using the value of E calculated 
in box i. The third line increments M by one 
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and limits M to be less than or equal to the constant 
Mma X . This computation, together with that in 

box 9, provides for the time-varying coefficient 
operation during initialization and re -initialization 
following a step. The limiting provides for constant 
coefficient operation during periods of constant 
signal level. 

Box 11. The necessary data exchanges required 
to set the filter for processing the next raw data 
sample are made in this box. 

FILTER PERFORMANCE 

Examples of filter performance are shown in 
Figures 6, 7, and 8, which are computer -printer 
plots with the filter input and output superimposed. 


The filter input data are plotted with R ! s, and the 
output data are plotted with S f s. Points where the 
input and output data points coincide are plotted 
with* *s, When the filter is in the input signal step 
mode, the output data are plotted with $ ! s. The 
raw data points were manually connected with dashed 
lines, and the smoothed data points were connected 
with solid lines for ease of interpretation. The 
background grid of plus signs was printed to provide 
a reference framework. These examples will be 
individually discussed. The value of was 

set at 10 for all of these examples. 

The input data in Figure 6 include a rather steep 
step. The filter detected the step and tracked it 
downward stabilizing at the new input signal level. 
The filter was in the step mode for two consecutive 
sample times with the step mode output plotted with 



4 4 4 •-* •• '' 

FIGURE 6. FILTER PERFORMANCE 
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FIGURE 7. FIL TER PERFORMANCE 

$’s. While in the step mode, the output data is just downward, and then stabilized at the new input signal 
the simple average of the last two input data samples. level. 

The input step in Figure 8 is smeared out over 
several data samples. The raw data in the step 

The input data in Figure 7 include two wild data region are such that they appeared to be stabilizing 

points with both wild point excursions being in the at a new level about half-way down the step. This 

same direction. The filter recognized these points conclusion was false, and the filter corrected and 

as being wild data, discarded them, tracked the step tracked the step downward to the true signal level. 
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FIGURE 8. FILTER PERFORMANCE 


CONCLUSIONS 

The digital filter discussed in this paper has 
demonstrated that good filter performance in a 
difficult signal environment may be obtained by 
using a combination of a constant coefficient linear 


filter, a variable coefficient linear filter, and pro- 
grammed logic, The greater utilization of the logical 
capabilities of digital computers in real-time signal 
processing is a fertile field for further research. 

This filter design illustrates the use of heuristic 
and experimental methods in achieving a practical 
solution to a technical problem. 
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REDUNDANCY EMPLOYING MAJORITY VOTING 
FOR A SATURN SERVOACTUATOR 

By 

Michael A. Kalange, James D, Smith, and Chester W. Martin 


SUMMARY 

The servoactuator was developed to improve 
the reliability of the Saturn S-IVB thrust vector 
control system by insuring continued system opera- 
tion if single point failures occur. 

The selection of the majority voting technique 
is discussed. Its simplicity is cited along with the 
advantages of minimum weight, size, and power 
consumption, and compatibility with existing control 
electronics. 

Operational features, design mechanization, and 
the analysis of test results are covered. 

INTRODUCTION 

A redundant, majority voting servoactuator has 
been developed for the attitude control system of the 
Saturn S-IVB stage (Fig. 1) , the stage that provides 


the velocity increment to place the Apollo spacecraft 
into a trajectory to the moon. During powered 
flight, the Saturn vehicle attitude control is obtained 
by gimbaling the main propulsion engines of each 
respective stage. The engines are gimbaled by 
hydraulic actuation systems where servo actuators 
convert electrical command signals and hydraulic 
power into mechanical output which controls the 
vehicle thrust vector. 

The Saturn booster lower stages (Fig. 2) have 
a clustered, multiengine arrangement which pro- 
vides a redundancy effect for not only the propulsion 
system but also the thrust vectoring system. 

With this arrangement, satisfactory vehicle control 
can be maintained even with a failure of one engine 
( two at some times of flight) . Other methods of 
enhancing the reliability of the single engine S-IVB 
stages were necessary. The complex mission 
requirements of this stage as a part of both the 
uprated Saturn and Saturn V launch vehicles dictate 
maximum reliability of all flight critical systems 
to insure mission success. The original, non- 
re dundant S-IVB thrust vector control servoactuators 
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FIGURE 2. SATURN LAUNCH VEHICLES 


are adequate in all operational performance aspects, 
but they are also a single point failure source. The 
need to eliminate single point failure possibilities 
in the thrust vectoring system resulted in a program 
to study various reliability improvement techniques. 
The already stringent quality control, inspection, 
and acceptance test procedures being employed were 
considered adequate. The only alternative was to 
consider a redundancy concept as the most likely 
reliability improvement approach, 


Under the constraints of a requirement 
that any redundant servoactuator would have to be 
mechanically and electrically interchangeable with 
the existing stage design, a preliminary feasibility 
study was begun. Various redundancy schemes 
were investigated and ultimately a majority voting 
servoactuator concept was chosen as the most 


feasible method to employ in reducing single point 
failures. Majority voting provided redundancy of 
the most critical servoactuator components without 
imposing weight and power consumption penalties 
on the system. 

Two majority voting servo actuators were 
designed, fabricated, and subjected to extensive 
development testing. Actuator operating charac- 
teristics with various failures in the redundancy 
scheme were studied. The prototype actuators were 
integrated into a breadboard type stage hydraulic 
system, and further testing was performed. These 
initial tests resulted in several design changes to 
the servoactuator and to other hydraulic system 
components. These changes, discussed in detail 
in the section on Required Design Changes, are 
being incorporated into the final flight configuration 
servoactuators. 
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FEASIBILITY STUDIES AND RELIABILITY 
CONSIDERATIONS 


Feasibility studies were initiated to investigate 
the S-IVB thrust vectoring system requirements and 
the existing hardware design to determine if any 
system changes could be made to improve the over- 
all system reliability and performance. A study 
program of hydraulic control system optimization 
techniques indicated that from an overall mission 
requirements standpoint, no changes in the S-IVB 
stage control system were required. Reliability 
considerations, however, made it highly desirable 
that single point failure sources be reduced. 

Studies which considered overall stage require- 
ments including the gimbaUng system indicated that 
some redundancy scheme could best satisfy the in- 
creased reliability requirements. The study 
of any redundancy concept involves considerable 
judgment in deciding between the actual gains made 
by going redundant against the losses from the added 
complexity of a redundant system. It is possible 
that in incorporating redundant components, failure 
detection devices, and switching devices, a decrease 
in reliability may result. Such an approach also 
leads to greater system weight and volume and to 
higher power consumption. 

Since the S-IVB stage was already designed and 
flight qualified, it became necessary to consider 
parameters other than just the servoactuator. Any 
change in the actuator would have to be compatible 
with the existing control requirements, mechanical 
envelope dimensions, and control electronics. To 
keep the actuation system as simple as possible, 
the selected redundancy scheme should incorporate 
only those features necessary to eliminate possible 
single point failures. Dual hydraulic cylinders, 
pumps, accumulators, etc. , would not increase the 
overall system reliability enough to compensate for 
the penalties imposed by greater system weight, 
power requirements, and cost. 

The most critical component of any hydraulic 
servoactuator is the servovalve. Typical high per- 
formance servovalves require extremely close 
fitting spools and sleeves and small orifices in the 
nozzle -flapper area. This makes the servovalve 
susceptible to contamination present in the operating 
fluid. In addition, the servovalve first stage has an 
electrical torque motor which is susceptible to open 
or short circuits, A system that would provide 


redundancy of these components would offer signifi- 
cant gains in system reliability without undue 
penalties of overall system complexity. 

The original nonredundant S-IVB stage servo- 
actuator has a position mechanical feedback arrange- 
ment whereby the need for an electrical feedback 
transducer is eliminated. Mechanical feedback was 
a significant advancement in hydraulic servoactuator 
technology because it eliminated the requirement 
for the electrical feedback transducer (an inherently 
failure -prone component) , the electrical power 
supply, and associated wiring. Mechanical feedback 
also eliminated the need for a feedback amplifier 
and summing network in the control electronics 
system. Because of the improvements resulting 
from a mechanical feedback actuator, this design 
feature was retained in the redundant majority 
voting servoactuator configuration. 

SERVOACTUATOR OPERATION AND DESIGN 

The majority voting actuator uses three active 
torque motors driven by three separate amplifiers 
as shown in Figure 3. Voting is performed in the 
servoactuator only. The torque motors receive 
feedback from the valve spool and actuator piston. 

The output pressures of the three torque motor- 
driven hydraulic amplifiers are summed at the end 
of the valve spool. The actuator piston behaves as 
the majority of the hydraulic amplifiers dictate. A 
majority decision exists when two hydraulic ampli- 
fiers are in agreement. 

Each of the three hydraulic amplifier assemblies 
is as nearly alike as possible (Fig. 4) to minimize 
the differences of each assembly in overall per- 
formance characteristics. Each torque motor has 
a balanced T-shaped armature-flapper mounted for 
pivotal motion on a flexure tube. A polarizing 
magnetic flux circuit is formed by upper and lower 
pole pieces supported by two permanent magnets. 

The motor armature is positioned in the magnetic 
flux circuit by the flexure tube. The flexure tube 
also acts as a seal between the electrical and 
hydraulic sections of the servovalve. For increased 
reliability, two torque motor coils are wired in 
parallel and positioned about the armature. Majority 
operation is possible because the mechanical feed- 
back torque motor armatures are essentially free 
beams sensitive to force balance. A failure of any 
redundant element (loss of input, loss of feedback, 
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hardover armature-flapper, change of forward-loop 
gain, etc. ) would result in a change in the output 
of that respective hydraulic amplifier and result in a 
change in spool end pressure and a change in valve 
spool position. The change in spool position is fed 
back to the torque motor flappers and in turn the 
two properly functioning hydraulic amplifiers 
equalize the spool end pressure generated by the 
faulty hydraulic amplifiers . The feedback and hy- 
draulic amplifier gains were made high enough so 
only a very small spool displacement is required 
to correct the effect of the failure. 


servo actuator incorporated the following features 
whose functions are described. 


SERVOVALVE 


The three torque motor mechanical feedback 
majority voting servovalve ( Fig. 6) is the key element 
of the selected redundancy concept. The three first 
stage assemblies consist of a dual coil d. c. torque 
motor, flexure mounted flapper, first stage nozzles, 
filter orifice assembly, feedback cantilever spring, 
load damping nozzles, and load damping nozzle 
filters. The first stage assemblies control fluid 
flow to the servovalve, actuator, piston, and 
cylinder. The load damping, or dynamic pressure 
feedback (DPF) , is a method of damping resonant 
loads to minimize their effect on control system 


In accordance with the specific and perform 
ance criteria for the S-IVB stage, two prototype 
servoactuators (Fig, 5) were fabricated and sub- 
jected to an extensive development test program. 
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The test program included hardware evaluation at 
both a component and system level. A schematic of 
the redundant actuator is shown in Figure 6, Each 


performance. This will be discussed in more detail 
later. 
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Of the three first stage hydraulic amplifiers, two 
used a balance armature feedback concept. For 
these two assemblies, springs are located at each end 
of the motor armature where the ends protrude 
through the air gaps. One spring is preadjusted to 
a fixed position between the armature and servovalve 
body. The other spring is fitted between the arma- 
ture and the position feedback cam by a cantilever 
beam cam follower assembly. The third hydraulic 
amplifier differs in that it uses a flapper extension 
to hold the flapper and armature assembly in a bal- 
anced position. This design arrangement provides 
a simpler design of the mechanical feedback mech- 
anism. The flapper of each first stage amplifier 
is rigidly attached to the midpoint of the armature. 
Each flapper extends through a flexure tube and 
passes between two first stage nozzles and two 
dynamic pressure feedback (DPF) nozzles to pro- 
vide two sets of variable orifices between the nozzle 
tips and the flapper. The amplifier passages from 
the first stage nozzles terminate in common cham- 
bers at the ends of the second stage spool. The 
DPF nozzle passages are joined in a common bush- 
ing groove and are ported through the servovalve 
body by the DPF pistons. Each torque motor is 
linked mechanically to the feedback wire to provide 
mechanical feedback force during servovalve opera- 
tion. 

SECOND STAGE BUSHING AND SPOOL ASSEMBLY 

The second stage bushing and spool is physically 
larger than a normal electro-hydraulic servovalve. 
This large physical size provides comparatively 
high spool driving forces and thereby reduces the 
valve* s susceptibility to contamination. The bushing 
itself is a flange-mounted laminar fit into a dead end 
bore. 

POSITION FEEDBACK MECHANISM 

The actuator position feedback mechanism con- 
sists of a tapered cylindrical cam, three cam 
follower assemblies, and three position feedback 
springs. The cam is attached to the servo actuator 
piston rod and any movement of the rod is trans- 
mitted through a cantilever beam cam follower 
assembly and position feedback wire back to the 
first stage hydraulic amplifier assembly. Restrain- 
ing devices are used to minimize deadband in the 
moving mechanical joints. This position feedback 
mechanism provides triple mechanical feedback 
redundancy of servoactuator piston position. 


DYNAMIC PRESSURE FEEDBACK (DPF) 

NETWORK 

The servovalve incorporates a DPF network 
using two nozzles and two spring- centered capaci- 
tance pistons to provide damping of resonant loads. 

A pair of DPF nozzles are located directly above 
each pair of first stage nozzles and are hydraulically 
connected to opposite sides of the spring-centered 
pistons. These pistons provide redundant operation 
and are located in the servoactuator body. The 
piston stubs are exposed to the cylinder pressure 
lines and are hydraulically coupled to the DPF 
nozzles to form the frequency sensitive DPF net- 
work. 

The DPF arrangement is identical to that 
used on the original S-IVB stage servoactuator. 
Balancing the spool end pressures, nozzle flow, 
and torques throughout the servovalve accomplishes 
load damping. Two spring- centered capacitance 
pistons provide redundant operation in the event 
one DPF piston fails. The system is designed to 
dampen resonant loads well below the resonant 
frequency. 

ELECTRICAL POSITION TRANSDUCER 

The S-IVB stage majority voting actuator 
utilizes a strain gage position indicating transducer. 
The strain gages are mounted on the earn follower 
cantilever beams of the mechanical feedback mech- 
anism. The free end of the cantilever beam, in 
moving, is stressed linearly and in turn is read as 
strain by the wire type strain gage. Signal condition- 
ing equipment is provided to amplify the output up 
to a level compatible with existing measuring and 
telemetry equipment. The strain gages also eliminate 
the use of the potentiometer shaft as a feedback earn 
driving mechanism. 

ACCESSORY COMPONENTS 

In addition to the major subcomponents of the 
majority voting servoactuator, other items are pro- 
vided to protect the assembly during operation or to 
facilitate actuator and stage checkout. Briefly, 
these items are: 

1. Hydraulic Fluid Filter . A non-bypass type 
filter is located in the main actuator housing. It is 
rated at 505 cm 3 /s ( 8 gpm) with a 17 N/cm 2 
(25 psi) pressure drop. It is a 5 micron nominal, 
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15 micron absolute filter fabricated from a stainless 
steel wire cloth material. In addition, smaller wire 
mesh type filter orifices are provided for the servo- 
valve first stage hydraulic amplifier assemblies 
and for the DPF network. 

2. Prefiltration Bypass Valve. The prefiltra- 
tion valve assembly allows fluid circulation through 
the actuator inlet port and directly through to the 
outlet to facilitate complete hydraulic system flush- 
ing. 

3. Cylinder Bypass Valve . The cylinder by- 
pass valve, when operated, allows manual movement 
of the piston rod by interconnecting both sides of the 
cylinder. The bypass valve also connects the cylin- 
der lines to a transducer pad that is equipped with a 
differential pressure transducer to monitor actuator 
cylinder line pressure. 

4. Midstroke Lock . A simple, removable 
midstroke lock is provided to mechanically lock the 
actuator piston rod at a mechanical null position. 

The lock is designed to withstand full actuator force 
output without damage to either the lock or actuator. 

5. Piston Position Indicator . A mechanical 
indicating device is included to aid in actuator cali- 
bration and checkout at field sites. The indicator 
is calibrated in degrees of engine displacement and, 
when used with the vernier provided, is capable of 
0. 04 degree readout accuracy. 

6. Bleed Ports, etc. Various bleed ports, 
test ports, and oil sample ports are located to pro- 
vide proper bleeding of the actuator and to allow 
easy installation of measuring transducers for 
checkout and flight telemetry. 


TEST PROGRAM DETAILS 

Initial testing of the S-IVB majority voting 
actuator consisted of performing acceptance tests 
on each unit to the current S-IVB stage servoactuator 
acceptance test criteria. Additional tests were 
derived to properly test the majority voting portion 
of the servoactuators. Both prototype actuators 
were operated in a normal mode with all three 
torque motors active. All performance parameters 
were within the S-IVB stage actuator requirements 
with the exception of total internal leakage and 
mechanical stroke. 


To meet the external envelope dimensions of 
the S-IVB stage, the actuator stroke was reduced. 
The higher internal leakage resulted from having 
three hydraulic amplifier assemblies instead of one 
as in the nonredundant actuators. These differences 
did not represent design or performance discrep- 
ancies; only required deviations to fabricate the 
two prototype actuators are represented. The effect 
of the deviations will be discussed in the section on 
Required Design Changes. 

Additional testing was performed to illustrate 
operation of the actuator with various failures 
induced in the actuator. Examples of these failures 
include plugged nozzles, plugged inlets, broken 
flexure sleeve, broken DPF springs, electrical 
opens, hardovers, and null offsets. This test 
program was designed to provide meaningful data 
on overall actual differences in actuator perform- 
ance with various failure modes. The test series 
provided data on the servovalve, the actuator, and 
the two subassemblies together under both loaded 
and no-load conditions. A summation of the testing 
performed and the results on servoactuator per- 
formance is shown in Table I. 

To further demonstrate the overall performance 
and reliability gains of the majority voting actuator , 
high temperature and vibration environmental tests 
were performed. Again, no major design dis- 
crepancies were detected. The servovalve did 
show sensitivity to certain sinusoidal vibration 
inputs; however, this can be corrected by minor 
redesign of the servovalve first stage. This vibra- 
tion sensitivity has been experienced on other 
actuator designs and has been corrected with very 
minor changes such as mechanical stops to limit 
flapper travel and variation of the support spring 
rates. 

One known characteristic of the majority voting 
configuration was accurately demonstrated by the 
test program. The majority voting actuator operat- 
ing in a normal mode essentially duplicates the 
nonredundant actuator in performance. Certain 
failure modes such as one open torque motor or 
one hardover torque motor will affect performance. 
With one motor hardover there will be approximately 
a two percent shift in the normal output position and 
the normal gain position will be reduced by one- 
third. Although overall actuator performance is 
affected by a torque motor failure, the system will 
compensate and will still provide adequate control 
forces to complete a flight mission. A torque motor 
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SINGLE POINT FAILURE vs. ALL ACTIVE MODE CONFIGURATION 
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failure in a nonredundant actuator would result in 
loss of control and compromise or abort the flight 
mission. Figures 7, 8, and 9 are typical perform- 
ance curves obtained during this testing. 


therefore, it can be concluded that adequate DPF 
action is maintained with one failed DPF network. 
In a nonredundant configuration, complete load 
damping would have been lost. 



FIGURE 7. PERFORMANCE DATA - ALL TORQUE MOTORS ACTIVE 


A failure in the load compensating, or DPF, 
network was also simulated. The worst case failure 
in the DPF section was simulated by removing a 
piston cap seal and "O” ring from one of the DPF 
pistons. A constant cylinder differential pressure 
of ±276 N/cm 2 ( ±400 psid) was maintained for this 
test. The break frequency of the DPF network 
increased from 0. 8 Hz to 2. 0 Hz, which would alter 
the load damping characteristics of the actuator. 
However, a reduction of this magnitude is too small 
to affect the control system. Other failures in the 
DPF network would not have any more influence over 
overall performance than that of a seal failure; 


Additional test data were obtained primarily 
to insure overall hydraulic system compatibility 
of the majority voting actuator configuration in the 
S-IVB stage. Various system pressures were 
tested, and attempts were made to optimize the 
overall system with a minimum number of actual 
hardware changes. System thermal characteristics 
were studied for compatibility with the existing 
stage design. 

The conclusion reached from this extensive 
test program was that the majority voting actuator 
could be used on the S-IVB stage without extensive 
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FIGURE 8, PERFORMANCE DATA - SIMULATED FAILURE MODES 


redesign of the flight stage or existing ground support 
equipment. In a normal no failure mode the actuator 
was adequate for the control forces required. In a 
single failure mode of any of the critical servovalve 
components, actuator performance was compromised 
slightly, but proper vehicle attitude control could be 
adequately maintained to successfully complete a 
flight mission. 

REQUIRED DESIGN CHANGES 


Concurrent with the majority voting servo actuator 
program, the complete stage hydraulic system was 
analyzed to determine those parameters which might 
be changed to gain in overall reliability and to inter- 
face with the majority voting actuator. Various minor 
design changes in lines, brackets, etc. , were made to 
facilitate incorporation of the new actuator configura- 
tion. All changes made to the stage or to the 


actuator resulted in improvements to the control 
system performance and/or reliability. Table II 
is a summary comparing the conventional ( non- 
redundant) actuator with the majority voting actuator 
design. The significant design changes are discussed 
briefly below. 

CONTROL COMPUTER CHANGES 

Since the control electronics were already triple 
redundant, the only changes to the control computer 
were to remove the comparator and switching circuits, 
which sensed an amplifier failure and provided 
switching to a good channel. This change was neces- 
sary since the selection, or voting, is now done by 
the actuator. This configuration effectively reduces 
the complexity of the S-IVB control electronics. 

STAGE HYDRAULIC SYSTEM PRESSURE 

The S-IVB stage hydraulic system was originally 
designed for an operating pressure of 2517 N/cm 2 
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FIGURE 9, PERFORMANCE DATA - SIMULATOR PERFORMANCE 


(3650 psi)and the thrust vector control actuator 
was sized accordingly. With experience gained 
through flight testing, it became evident that the in- 
flight loads and therefore the demands on the 
actuator were considerably less than the actuator de- 
sign capability. When all aspects of the hydraulic sys- 
tem were considered, it was decided that the system 
operating pressure could be reduced to 1827 N/cm 2 
(2650 psi) . The effect of this system pressure 
reduction would be a reduction in actuator internal 
leakage, a reduction in the overall stresses on the 
various hydraulic system components, and a lower 
probability of external leakage of joints and fittings. 
The actuator is still capable of providing the required 


control forces with this reduced system pressure and 
with no increase in actuator piston area. 

SERVOACTUATOR STROKE 

The prototype majority voting actuator was 
limited to a ±6 degree stroke, in comparison to a 
±7 degree stroke in the original nonredundant actua- 
tor. This stroke reduction in the prototype actuator 
was necessary to conform to the stage mounting 
dimensions. In determining the final production con- 
figuration, repackaging of the three torque motors 
and some internal dimensional changes resulted in 
restoring die ±7 degree gimbal angle. Although the 
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TABLE II. SERVOACTUATOR COMPARISON SUMMARY 

SERVOACTUATOR PARAMETER 

CONVENTIONAL 

ACTUATOR 

MAJORITY VOTING 
PROTOTYPE 

MAJORITY VOTING 
PRODUCTION 

PISTON AREA 

75.98 cm 2 

75.98 cm 2 

75.98 cm 2 

STROKE 

7.34 cm (±7deg) 

6.35 cm (±6 deg) 

7.34 cm (±7deg) 

SUPPLY PRESSURE 

2513 N/cm 2 

2513 N/cm 2 

1826 N/cm 2 

POSITION GAIN 

0.079 cm/ma 

0.079 cm/ma 

TO BE DETERMINED 

RATED VELOCITY 

8.6 cm/s 

8.6 cm/s 

TO BE DETERMINED 

RATED INPUT SIGNAL 

±50 ma 

±50 ma 

± 50 ma 

COIL RESISTANCE 

100 ohms 

100 ohms (3 ea) 

100 ohms {3 ea) 

MASS 

18 kg 

21 kg 

21 kg 

NOMINAL C. TO C. LENGTH 

58.5 cm 

58.5 cm 

58.5 cm 

ACTUATOR FEEDBACK 

CONICAL CAM MFB 

CONICAL CAM MFB 

CONICAL CAM MFB 

POSITION TELEMETRY TRANSDUCER 

DUAL 2K POT 

DUAL STRAIN GAGE 

DUAL STRAIN GAGE 

TAILSTOCK MATERIAL 

6AL4V TITANIUM 

6AL4V TITANIUM 

6AL4V TITANIUM 

BODY MATERIAL 

AL2014-T6 

AL2024-T4 

AL7075-T73 

CAM FOLLOWER SPRING MATERIAL 

15 -7 STEEL 

15-7 STEEL 

INCONEL 718 


±6 degree stroke would have been adequate for con- 
trol purposes, the additional stroke is an added 
safety margin. 

INTERNAL LEAKAGE 

A three torque motor servovalve with three 
hydraulic amplifiers has a higher leakage rate than 
an actuator with a single first stage. Changes were 
made in the onboard auxiliary hydraulic system to 
provide the increased flow capability needed for 
proper auxiliary hydraulic system operation. 

RELIABILITY IMPROVEMENT ASSESSMENT 

Historically, most servovalve/ servo actuator 
failures («80 percent) result from a failure in the 
first stage of a servovalve because of its highly 


critical requirements. By incorporating redundancy 
in this first stage, it is evident that certain gains 
in reliability are achieved* Since there are, as yet, 
no inflight data on the majority voting servoactuator 
and no production quantities on which to base an 
analysis, the reliability assessments made thus far 
are based on experience with similar actuator and 
hydraulic system designs. The comparative numbers 
derived are based on the probability of known failures, 
their cause, and their end result. By considering 
not only the redesigned actuator but all other resultant 
system changes as well, the overall criticality 
improvement is approximately 20 to 1. The majority 
voting actuator itself is approximately 16 times less 
susceptible to functional failure than the original 
actuator design. 

Table III is a comparison chart showing the im- 
provement resulting from incorporation of the 
majority voting servoactuator. This table illustrates 
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TABLE III, CRITICALITY COMPARISON SUMMARY 

(PRESENT vs. MAJORITY VOTING SYSTEM) 


COMPONENT/ ASSEMBLY 

PRESENT SYSTEM 

MAJORITY VOTING 
ACTUATOR SYSTEM 

CRITICALITY 

IMPROVEMENT 

RATIO 

ACTUATOR ASSEMBLY 

2,224 

II I 

20.0 

AUXILIARY PUMP 

740 

410 

1.8 

THERMAL SWITCH 

150 

150 

1.0 

ACCUMULATOR 

110 

61 

1.8 

PLUMBING 

4 

2 

2.0 

TOTAL CRITICALITY EXCLUDING 
ACTUATOR ASSEMBLY 

1,385 

834 

1.65 

TOTAL CRITICALITY INCLUDING 
ACTUATOR ASSEMBLY 

3,609 

945 

3.8 


that the most significant improvement was in the 
servoactuator itself, and this combined with the 
other system changes significantly decreased sys- 
tem criticality. In no instance is a component less 
reliable than the original design. 

CONCLUSION 

To increase the overall thrust vectoring system 
reliability of the S-IVB stage, a study program was 
initiated to select the optimum improvement method. 

In accordance with existing requirements of the opera- 
tional flight stage and the need to implement any 
changes with minimum impact on existing flight 
schedules, a majority voting actuator concept was 


chosen. This concept provides redundancy in the 
critical first stage area of a servovalve, yet holds 
to a minimum the size, weight, and power consump- 
tion. Majority voting requires no failure detection 
devices or switching arrangements; therefore, 
overall system complexity for a redundant system 
is minimized. 

A detailed study program was conducted to 
demonstrate the feasibility of a majority voting 
actuator, the overall design suitability, and the 
resultant gains in system reliability. Results to 
date indicate that the overall system reliability will be 
significantly improved by the majority voting actuator. 
The development is complete and only final formal 
qualification testing on the flight configuration system 
remains to be done. 
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INDIVIDUAL ANGULAR MOMENTUM VECTOR DISTRIBUTION 
AND ROTATION LAWS FOR THREE DOUBLE-GIMBALED 
CONTROL MOMENT GYROS 


By 

Hans F. Kennel 


SUMMARY 


B, a 3 x 2 matrix (equations 11 and iia) 

e = cos 


A distribution law and a rotation law for the 
individual angular momentum vectors of the three 
control moment gyros of the Apollo Telescope Mount 
are developed. The attitude control law controls the 
magnitude and the direction of the total angular 
momentum vector, using only three of the available 
six degrees of freedom. Without a distribution law, 
a highly undesirable distribution can develop where 
two of the three individual angular momentum vectors 
are parallel and the third is antiparailel, reducing the 
total angular momentum available by two thirds. The 
total is always fully available with the desirable dis- 
tribution as provided by the distribution law, unless 
gimbal stops interfere. The desirable distribution 
has the following advantages: (1) antiparallel dis- 
tribution is avoided, (2) the gain available for the 
attitude control law is maximized, and (3) the cross 
coupling is minimized. The rotation law minimizes 
the inner gimbal angles with the result that hitting 
the. inner gimbal stops is avoided as much as possible. 
Operation of the distribution and rotation laws in case 
one of the CMG’s fails is also discussed. 


e . 

— l 


e 

mn 


"ik 


"'Ti 


E. 

L 


a unit vector in direction of the i 
CMG’s angular momentum 

direction cosines of £. (i - m) with 
respect to the vehicle axis n 

S n/ l/( i - e. k 2 ) 


= £i + £2 + £3 ♦ Normalized total angular 
momentum of the CMG cluster 
(maximum value: 3) 


components of £^ in vehicle space 

intermediate quantity used in the digital 
program 

To -e 3 + e 2 l 


e 


i-e 3 0 ~e t 


DEFINITION OF SYMBOLS 



h. 

— L 

see equation ( 5) 


cyclic permuted subscripts (1,2, 3, or 
2,3,1 or 3,1,2) 

h 

mn 

components of h . (i 
space 

= m) in vehicle 

general subscripts (range 1, 2, 3; all 
possible combinations) 

k d 

gain of the isogonal distribution [l/s] 

a bar below a letter indicates a vector 

V 

maximum of |K^ 1 , 

I i/s] 

quantity 

kr 

rotation gain (K^ > 

0), [i/s] 

a dot above a letter indicates a time 
derivative 

q 

determinant (see equation 13) 


A.. a 2 x 3 matrix (equation 9) 


r mn intermediate quantities used in the digital 

program 
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= sin 


t 

u , 

“L 



5 3(l) 


6 . 
— L 


= tan 

unit vector along the vehicle axis 
vehicle axes 

angles used in conjunction with the 
rotation law, defined in Figure 4 
th 

inner gimbal angle of i CMG 
th 

outer gimbal angle of i CMG 



6 3(i) 


e. error of the isogonal distribution, [1/s] 

€_ rotation error, [1/s] 

K 

e part of € stemming from the i th CMG, 

Kl [l/s! E 

e Bi =e T s Ri /K B 

gain modifier for isogonal distribution 

actual angular velocity of , [ 1/s] 

Q angular velocity command for rotation 

[1/s] 


INTRODUCTION 


distributions, a distribution law is developed. The 
desirable distribution is such that, after equilibrium 
is achieved, the individual angular momentum vectors 
have equal components along the total. Other results 
are equal angles between the individual vectors and 
equal angles between the individual vectors and the 
total. Because of these equal angles, the desired dis- 
tribution is called the ’’isogonal distribution” (Fig. 1) . 
The isogonal distribution has the following advantages: 
(1) antiparallel distribution is avoided, (2) the gain 
available for the attitude control law is maximized, 
and (3) the cross coupling is minimized. The dis- 
tribution law uses two degrees of freedom; rotation 
about the total angular momentum vector still remains 
free. Therefore, a rotation law is added to minimize 
the inner gimbal angles with the result that hitting 
the inner gimbal stops is avoided as much as possible. 



The Apollo Telescope Mount (ATM) carries three 
double-gimbaled control moment gyros (CMG) [1,2]. 
The magnitude of the angular momentum of each CMG 
is fixed, and the arrangement has six degrees of free- 
dom. The attitude control law will command the 
magnitude and the direction of the total angular momen- 
tum; therefore, it utilizes only three degrees of free- 
dom. The distribution of the individual angular mo- 
menta is not controlled. This freedom can lead to 
highly undesirable distributions, such as the anti- 
parallel situation in which two vectors are parallel 
and the third is antiparallel. To avoid undesirable 


FIGURE!. ISOGONAL DISTRIBUTION 

The existing gimbal angles are the inputs to the 
distribution and rotation (D&R) laws and the gimbal 
angle rate commands are the outputs. These rate 
commands are in addition to those from the attitude 
control law. To develop the D&R laws it is assumed 
that the angular velocity of the vehicle is negligibly 
small and that the contribution of the gimbal rates 
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caused by the D&R laws to the total angular 
momentum is negligible. For simplicity, unit 
vectors along the individual angular momentum 
vectors are used and are called e ( i = 1,2, 3) ; 

their sum is e^ ( 0 .5 j e,^ | £ 3) . To avoid inter- 
ference of the D&R laws with the attitude control 
law, it is necessary that these laws do not result 
in any change of the total angular momentum 
vector of the CMG cluster (i. e. , no acceleration 
on the vehicle) * 


The ratio of the angular velocity command to an 
angular error function may be called the gain for 
the D&R laws . In addition to a selectable constant, 
there is an inherent gain which varies with the gim- 
bal angles . This is acceptaoie if the loop is stable 
with the highest inherent gain. 

DISTRIBUTION LAW 



FIGURE 2. DEVELOPMENT OF 
DISTRIBUTION LAW 


For the sake of argument we can assume that 
two of the e . vectors are summed first and then the 

— i 

third is added to form e^,. If we desire to redis- 
tribute the first two without disturbing the total 
(e T = 0) , we can only rotate the first two about 

their sum. The angular rate e^ about this sum is 

made proportional to the scalar function which, 

for e t and e 2 , is given by (e t • e - e 2 - e_ T ) . 

This scalar function provides a signal proportional 
to the deviation from the desired orientation. To 
assure rotation about the sum of the first two vectors, 
£. is also made proportional to their cross product. 

Pairing e 1 and £ 2 > for example, we have ( Fig. 2) 


ii = £3(e 2 x e t) 

(i) 

e 2 = e 3 (e j x e 2 ) 

(2) 

e 3 = k d <£i ' £ t " e 2 • e T ) 


= K^(e! • e^ 3 - e _2 ' £ 3 ) • 

( 3 ) 


By cyclic permutation the equivalent equations 
for the other two pairs can be developed. The con- 
stant Kp can be chosen from other considerations 

(see discussion at the end of this section) , The 


cyclic permutation allows us to use index notation 
with the understanding that we have the following 
three sets of values for i, j, and k: 


i 

j 

k 

i 

2 

3 

2 

3 

■ 

1 

3 

1 

1 

2 


The vector pairing can be assumed to be simul- 
taneous and the resulting velocities veetorially added 
to form: 

e. = h. x e. (4) 

— l —i — i 

with h . = e. e . + €. .e. . (5) 

-i k-J j-k 

It can be seen (after expansion of equations 4 
and 5) that no matter what value is chosen for , 

the sum of the £.'s (or £ ) is zero (Appendix A) . 

To develop the equations for the gimbal velocity 
commands, we must consider the following built-in 
relationship (Fig. 3); 
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$3(1) 

FIGURE 3 . CONTROL MOMENT 
GYRO ORIENTATIONS 


For an existing gimbal velocity we have 


e. = A, .5... 

-L L “( 1 ) 


with 


e . 

—1 


U 


"ik- 


and 6 ( .. 
“(i) 


Hi) 

*3(i)J 


A. - 


_ - s 6 l(i) C 6 3 (i) 

+S 6 i(i) s 6 3 (i) 


- C6 l(i) S6 3(i) 

_C6 l(i) C5 3(i) 


-c6 


Ki) 


( 8 ) 


(9) 


As ^.-command law we need (see Appendix C 


and proof below) : 

6,. v = B. h . 
“( 1 ) 

with 


(■ 10 ) 


r«i 


B. = 

_+S ^3(i) 

+c<5 , . v 
3(i) 

0 

_ e ik_ 

* c6 l:«)° 6 3U)-i ' C "lU) S "3U)-j ' “lUJ-k 

(6) 

i 


+t6 l(i) s6 3(i) 

-1 


where the u .’s are unit vectors along the vehicle axes 

with the indices permuted as previously shown, and 
the 6 1 s are gimbal angles defined in Figure 3. The 
second index on the components of e ^ refers to the 

vehicle axes; for example, e_ is the direction cosine 

of e . with respect to vehicle axis j. Therefore we 

can also write: 


or in terms of direction cosines (with 

e ' = *n 

ik 


B. = 
1 


- e ■) ): 

Ik ; ; 


e., 'e.. 
ik ij 

e.. ’e.. 
ik li 

> (e ’) 2 e.. 
xk ik n 

- e (e 1 
ik ik 


0 



(11a) 





e 12 

e 13 

£2 

= 

e 21 

e 22 

e 23 

_ £3 


_ e 31 

e 32 

e 33 


Hi 

Us 


(?) 


The existing hardware implementation through resolvers 
on the gimbals provides the direction cosines of equa- 
tion ( 7) whereas the gimbal angles are not available 
explicitly. Thus, is expressed in terms of the 

direction cosines (see Appendix B) . 


The generally nonortho go nal direction cosine matrix By multiplying, it can be shown that 

in equation (7) will be needed later. The e_’s are 

given in terms of gimbal angles in Appendix B. — i “ A i B i — i “ ~i x — i —{ x — i 
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if it is assumed that the actual and the commanded 
gimbal rates are identical. Equation (10) is, 
therefore, the proper solution for the gimbal velocity 
commands to solve equation (4) . ’ 


where 


K. 


D 


1 K 1 

D max 


A discussion on the freely selectable isogonal 
distribution gain (equation 3) is in order. When 
this gain is positive, we get a right-handed configura- 
tion ( right-handed means that when we look down 
and identify the individual vectors counterclock- 
wise, we find the sequence 1 - 2 - 3) ; for a negative 
Kp, we get a left-handed configuration. Both con- 
figurations are stable. Since neither sign has a basic 
preference, we can dynamically (during operation of 
the CMG's) select the sign of the gain so that 

the vectors are driven toward the closer solution. 

This action implies a knowledge of whether the 
instantaneous distribution is right- or left-handed. 

The following determinant affords this knowledge: 


e ll 

e 12 

e 13 

e 21 

e 22 

e 23 

e 31 

e 32 

e 33 


It can be recognized that this is the determinant of 
the direction cosines for the angular momentum 
vectors . If these vectors are mutually perpendicular, 
we have an orthogonal coordinate system, and it is 
well known that the value of the determinant q is +1 
for a right-handed system and -1 for a left-handed 
one. For a continuously deformable system as the 
one at hand, the determinant can be anywhere between 
these limits and the sign of the determinant can be 
used as the sign for the distribution gain K^. A 

value of zero for q indicates that the three vectors 
are in a plane. A change in sign for q occurs under 
certain conditions. Gimbal stops may disallow the 
isogonal distribution and deform the distribution so 
much that q changes sign. The distribution gain is 
much lower than the attitude control gain (as dis- 
cussed later) , and maneuver commands can cause 
a relatively fast change in the distribution which 
could result in a sign change of q. Finally, when- 
ever e_^ passes through zero, q changes sign. 

Regardless of the reason for the sign change, it is 
always beneficial for the system behavior. A further 
improvement in system behavior can be made through 
the introduction of a multiplier A^ so that the isogonal 
distribution gain becomes 

k d = a d k d’ sgn q 


and 

°= X D= + 1 * 

The multiplier A^ is a function of e^= le^l . For 
small e^ we desire = 0, thus avoiding the possi- 
bility for large angular redistributions when e^ 
passes close to zero. When e^ is in the vicinity of 

unity ( i. e. , without a distribution law, antiparallel 
is a problem) , the multiplier A^ should be at its 

maximum. For large e^ , a small A^ is sufficient. 

The exact function of ^(e^) is not critical, and 

straight line segments may be used (Appendix B) . 

The maximum distribution gain should be large 

enough to avoid antiparallel, but not larger than 
necessary because gimbal stops sometimes disallow 
the isogonal distribution and the attitude control gain 
must be higher than the distribution gain so that the 
attitude control takes over in case of conflict. During 
normal operation there is no conflict because the dis- 
tribution and rotation laws do not result in an accel- 
eration of the vehicle. 

Temporary deviations from the isogonal distri- 
bution can be tolerated to a large extent. For example, 
for the antiparallel case, e « 1. This case is de- 
picted in Figure 1. The dot product between any of 
the isogonaily distributed vectors and the antiparallel 
direction is -1/3, or there is an angle of almost 110 
degrees between the desired individual vector direc- 
tion as demanded by the isogonal distribution law and 
the antiparallel direction. This indicates that even 
a deviation of 40 or 50 degrees from the desired 
direction can be temporarily accepted. 


ROTATION LAW 


The isogonal distribution law concerns itself 
only with the relative distribution between the indi- 
vidual and the total angular momentum vectors. A 
rotation about the total leaves the distribution 
unaffected. The rotational freedom can therefore be 
used for some benefit. To reach some desired 
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orientation about e an angular velocity Q_ of the 
following form must be commanded: 

— ^ € R-T (14) 

where e will be developed later. For the individ- 
R 

ual angular momentum vectors, the relation exists 
= £? x (15) 


Equation (15) is identical in form to equation (4) ; 
only ft is substituted for h . Therefore we get 

analogous to equation (10) 



- B .SI 

i — 


(16) 


No unique law exists for the rotation contrary to 
the unique, is ogonal distribution law. In the applica- 
tion of the three CMC system to ATM, the most 
benefit can be derived from a rotation law if the 
inner gimbal angles are minimized . Even under this 
assumption, minimizing must be first defined, since 
no unique definition exists . Avoidance of hitting the 
inner gimbal stops, which are at ±80 degrees, was 
given priority. It was also desirable to have a con- 
tinuous function rather than a switching function for 
the rotation law. Because the three vectors rotate 
as a unit about e ^ , none of the inner gimbal angles 

will generally be at an absolute minimum, but a 

compromise will be reached for all three. The 

following form was selected for € : 

R 


e R ¥> e RL 
1=1 


(17) 


with 


«R 


=f tS, . .. sa. c/3 . 

Ri e T i(i) i p i 


(18) 


Because will become zero at equilibrium and 
K r is a freely selectable positive constant, no addi- 
tional constants are necessary in equation (17) . 

The reasons for the various quantities in the 
error function are given. To make Sl_ indepen- 
dent of the magnitude of we have to divide by 


e^ . The tangent of the inner gimbal angle (rather 

than the angle itself) is chosen for two reasons : 

( 1) to give the larger angles more weight and ( 2) to 
make use of trigonometric functions which are readily 
available in the form of the direction cosines (equa- 
tion 7) . Figure 4 defines the two other angles used 
for i = i . Consider, for the sake of the explanation, 

that the plane for which 6 . , .. =0 is the equatorial 

l(i) 

plane . Then the angle indicates the separation of 
the meridian plane containing and the one contain- 
ing e m . The combination of td, ... sa. will select 
& — T i(i) i 

the proper sign for the angular velocity and go to 
zero when the desired conditions are reached. The 
multiplier c (3 . takes the effectiveness of a rotation 


in reducing <5,... into account, eliminating the e - 
1 ( i) ^ R i 

contribution to completely when (3 . = — where 
a rotation does not change d^.^ , 


z v 



FIGURE 4. ANGLE DEFINITIONS 
FOR ROTATION LAW 


We can identify several cases; Figure 5 shows 
an opaque unit sphere, the equator of which indicates 

6 , , . v - 0 . The vertical line is a longitude onto 
1 ( 1 ) 
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8l(l)-+90* 



TL® CIRCLE OF . 

TIP LOCATIONS OF e j O\U)~-90° 

FOR ROTATION 
ABOUT e T 


U= UNSTABLE 
EQUILIBRIUM 
SS STABLE 

EQUILIBRIUM 


FIGURE 5. EQUILIBRIUM CASES 
FOR ROTATION 


which, for convenience, all intersects for the direc^ 
tion of £ t have been placed. Usually e_^ will not ter- 
minate on the unit sphere . 


e il e T2 “ 6126 


T1 


SO! 


1 -s/leji 2 + e 12 2 ) (e T1 2 + e T2 2 ) 


e il e T2 - e l2 e xi 


and e. 


58 ~2 |“ e 13 (e 13 f ) 2 (e li e T2 - e 12 e xl )| . 

(19) 

Cyclic permutation of the indices leads to 


R3 4 


€ R2 e 2 | " 631 ^ e21 ^ 2 ( e 22 e T3 " e 23 e T2 ^ | ( 20) 


e R3 “ e 2 ) " e 32 t e 32 ? ) 2 ( e 33 e T1 “ e 31 e T3 ) 


( 21 ) 


CASE I. 


The circle of possible tip locations 


for £. (assuming a rotation about e.^,) does not 

intersect the equator, and the inner gimbal angle 
^Ifi) iS P osit * ve * We two equilibrium conditions: 

one stable and one unstable . 


CASE II . — The circle of tip locations inter- 
sects the equator. We find four equilibria: two are 
intersections and are stable, and two are unstable. 

CASE III . — This case is equivalent to case I; 
only the sign on 6 is reversed. 

Determination of equation (18) in terms of the 
readily available direction cosines and the components 
of the total angular momentum vector leads to (1-1) : 


1 



DISTRIBUTION AND ROTATION 
LAW COMBINATION 


Since the -desired gimbal velocity commands 
from the distribution law and from the rotation law 
are independent of each other, they can be combined 
into 



W £ R -T> 


( 22 ) 


These gimbal velocity commands should be 
added to the commands from the attitude control law. 

The distribution is unaffected by the rotation as 
already indicated during the development of the 
rotation law; i.e., the e. f s of the distribution law are 

L 

not affected. On the other hand, e_ is affected by 

K 

a change in the distribution, and it is advisable 
that (contained in e^) is made smaller than K^’ 

(contained in h. through e. ), A ratio of K^/K^’ =9-1 

was found to be acceptable, but it is not critical 
either way. 
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OPERATION WITH TWO CMG'S 


CONCLUSIONS 


A system with three CMG’s has the capability to 
lose one and still be able to control the vehicle, even 
if the performance is degraded. Two CMG’s have only 
four degrees of freedom, and three are being used 
for attitude control. There is no need for a distribu- 
tion law since the two remaining angular momentum 
vectors have inherently the proper distribution, but 
the rotation law still can minimize the inner gimbal 
angles of the operative CMG’s. To convert from the 
three to the two CMG operation, it i£ only necessary 
to set all the direction cosines of the inoperative 
CMG to zero. (Gimbal angle velocity commands 
issued by the computer to the inoperative CMG should 
be disregarded. ) No distribution command will appear 
for the operative CMG’s. But, as desired, the rota- 
tion law is working as usual, having now only two error 
sources, rather than three (equation 17) . 


The isogonal distribution law and the rotation 
law were implemented in a hybrid simulation, and 
the behavior was studied with the aid of a three- 
dimensional display . * Both laws performed as 
expected. It was also noted that, if gimbal stops 
disallowed the isogonal distribution, the distribution 
approximated the desired distribution as close as 
possible under the imposed restrictions. Analysis 
of the dynamic performance of the attitude control 
law showed a marked improvement in response of the 
desired channel and a strong reduction of the cross 
coupling into the other channels. 


* The three-dimensional display shows the body 
axes, the three individual angular momentum vec- 
tors, their total, and the total commanded angular 
momentum vector simultaneously, identified by 
appropriate coding. This proved an invaluable tool 
for the investigation of the behavior of the system [3]. 


APPENDIX A 
Sum of the e‘s 


Expansion and combination of equations (4) and 
(5) yield 

£j ~ (^3 §2 ' + e 2®3 ) * 

e 2 = ( £l e 3 + e 3 e t ) x e 2 (A -i) 

®3 = ®1 + 6! §2 ) X e 3 

For the sum of the e^ f s, we get 
e T = + (e 2 x e 3 +e 3 x 

+ (£ 3 X £4 + £4 x £3 ) ^2 (A -2) 

+ (£1 x £•) + §2 x £1 ) e 3 • 

Because the vectors in parentheses are all zero, 


e is zero and it is immaterial what is chosen for 
-T 

the e ’s. The form chosen was (equation 3) : 
i 

61 = K D (e 2 - e 3 ) • e.j 
e 2 = K D (e 3 - e t ) • e, 

63 = Kj-)(e j _ £2 ) ‘ — 3 

Because the e.'s are independent of each other, the 

K 's could be different for each e. without affecting 
D 1 

the condition that e _ ^ = 0. This is not sensible 

though, because it would not treat the vector pairs 
alike, and there is no reason for that. 
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APPENDIX B 


Inputs 


Suggested Digital Computer Implementation 
(Sequence of Operations) 

®T1 = + 631 + 631 


%i 

= +C6 1(1) C6 3(1) 

K d' e T2 = e 12 + e 22 + e 32 

e 12 

" C,5 1(1) s6 3(1) 

e T3 = ® 13 + ® 23 + 633 

k r 

e 13 

_S6 l(l) 

e 2 = e 2 + p 2 

T T1 T2 T3 

e 2l 

" S6 1(2) 

e T = \/e T 2 

e 22 

= +C6 1(2) C6 3(2) 


e 23 

" C6 1(2) S6 3(2) 

q = e li(e 2 2^33 “ e 32 e 23) + e 2i( e 32 e 13 

e 31 

_c6 1(3) s6 3(3) 

+ e 3l( e 12 e 23 “ e 22 e l?) 

e 32 

_S6 1(3) 

sgn q - +1 for q 0 

e 33 

= +C6 K3) C6 3(3) 

sgn q = -1 for q < 0 


The equivalences of the e r s in terms of the 

mn 

gimbal angles are only given for completeness. The 
e *-s are provided by resolver chains in the existing 

hardware and constitute the actual inputs to the 
digital computer. 


Sequence of Computations 


f e 13 *) 2 

- ( 1 - e 13 2 ) ~ 1 

1 both quantities 

f are needed in 

®13 ' 

= I ( e 13 ' ) 2 ] + ^ 

^ the following 

< e 2l') 2 

= (1 - e 21 2 ) -1 

i 

e 21* 

= I < e 2i') 2 ] 

\ 

(e 32 ') 2 

= ( 1 - e 32 2 ) 1 

i 

e 32 

= t(e 32 ') 2 ] + 2 

\ 


x D = 0 

A d = 2e T - 0.5 
A D = +1 


A d = +3. 5 - 2e T 

A d = + 0. 2 


for e T g 0. 25 

for 0.25 < e T g 0.75 
for 0. 75 < e T .g 1.25 
for 1. 25 < e T g 1. 65 
for 1.65 < e,„ 


K D = K D ,A D Sgnq 

= e 21 e 31 + e 22 e 32 + e 23 e 33 
E 2 " e ll e 31 + e 12 e 32 + e 13 e 33 
E 3 = e ll e 21 + e 12 e 22 + e 13 e 23 


(Eg - E 2 )K. 


D 
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c 2 ■= (Ei * E 3 )K d 

*“ * h >‘ + VTl 

e 3 = (E, - E t )K D 

r i 2 = h 12 + c R e T2 

h ll = € 3 e 21 + e 2 e 31 

r 13 = h 13 + e R e T3 

^12 “ € 3 e 22 * e 2 e 32 

r 21 = h 21 + e R e X1 

^13 ” e 3 e 23 + e 2 e 33 

r 22 = h 22 + e R e, r2 

h 2i ~ 6 l e 31 * e 3 e ll 

r 23 = h 23 + e R e T3 

^22 = e l e 32 + e 3 e 12 
^23 = € i e 33 + e 3 e 13 

*31 = h 31 + e R e T1 

h 31 " € 2 e ll + e l e 21 

*32 = h 32 + e R e T2 

^32 " e 2 e 12 + e l e 22 

r 33 ^ h 33 + e R e T3 

^33 = € 2 e i3 + e l e 23 

Outputs. 


^l(l) = ' e i3 ,(e i2 r n - e H r 12) 

e R1 ' = e 13 (e 13 , ) 2 (ei 2 e T1 - e 11 e T2 ) 

« 3(1) = +(e 13 ') 2 e 13 (e 11 r 11 + e 12 r 12 ) 

^ 2 ' = e 21^ e 21 ') 2 ( e 23 e T2 ” e 22 6 X 3^ 

^1(2) = * e 21 , ^®23 r 22 “ e 22 r 23) 

e R3 ' = e 32 (e 32 ') 2 (e 31 e T3 - e 33 e T1 ) 

* 3 ( 2 ) = + (e 2 i') 2 e 21 (e 22 r 22 + e 23 r 23 ) 

K 

e = ■ — ~o ( e ’ + e r + e * ) 
R e T 2 P.l e R2 R3 1 

*j.(g) = " e 32'( e 31 r 33 “ e 33 r 3l) 

^3(3) = +(e 32 , ) 2e 32< e 33 r 33 + e 31 r 31 ) 


*13 


- *21 


- *32 
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APPENDIX C 

Development of Matrix B 


We desire to get the gimbal velocities to solve 
equation (4) , which is (subscripts dropped) 


With equation C-5 the first or second equation of 
04 can be solved to get 


£ = h x e . ( C -1) 

The angular velocity of e_ can be defined as 
vU. Then, 

e = w x £ . (C-2) 

This leads to (equations Ol and C-2) 

(h-w) x e = 0 (G-3) 

and this equation can only be solved because oj and 
£ are known in terms of the gimbal angles and their 
velocities. With 


63 = 

+ 1 6j (s 6 3 h 2 

- c .Sjhj ) 

“ ^3 

~ 5 ~ 


+s6 3 

+c6 3 

0 

Jz_ 


-t6 ic6 3 

+ 16^63 

-1 


L\] 

i. e, , _6 = B h 

It might be interesting to note that the cross- 
product law is 



_ ef 


+06^63 


+36364 

e = 

e 2 

= 

-c6js6 3 

and = 

+c6 3 6j 


_ e 3_ 


-S6| _ 


_ -<5 3 _ 


(X PR) = BAB 
and that 

e = -AB 


we obtain for equation C-3 



0 -(h 3 + 63) +(h 2 - C636J 


+06^63 

0 = 

+ (h 3 + 63) 0 -(h t - 5636!) 


-c6js6 3 


-<h 2 - 0636^ +(hj - s6 3 6i) 0 


- “S6j _ 


(04) 

The third equation in C-4 yields 

5 t - + s h t 4 - cd 3 h 2 . (C-5) 


where e is defined as 


0 

“ e 3 

+e 2 

+ e 3 

0 

“ e i 

"* e 2 

+e l 

0 
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AN OPTIMALLY CONTROLLED MASS DISTRIBUTION GRAVITY 
GRADIENT SATELLITE CONTROL SCHEME 


By 

George B. Doane HE 


SUMMARY 


This paper summarizes research done in ex- 
ploring the potential of using gravity gradient phe- 
nomena to produce both damping and positioning 
torques on a satellite. The results demonstrate 
that, by properly controlling the inertia tensor of 
the satellite, the desired objectives may be achieved. 
The graphically displayed results show that asymp- 
totically stable motion is achievable in attractively 
short lengths in time. The results were achieved 
by the use of iterative computational techniques . 

INTRODUCTION 

Present satellite technology tends to regard 
gravity-gradient-generated torque either as an 
unfortunate perturbative influence or as a strictly 
positioning torque. In the latter case, damping is 
typically achieved by such means as gas jets, control 
moment gyros, or structural losses. As satellites 
increase in both size and longevity, the need for 
other types of damping becomes apparent. Some 
investigators are working on such things as magnetic 
torquing of satellites . This investigation shows the 
potential of using gravity-gradient-based torquing as 
a means of achieving reasonably rapidly damped 
motion, and this torquing inherently does not require 
mass expulsion or an external field other than a 
gravitational one. 


ANALYTICAL APPROACH 

The approach taken was to write expressions, 
based on the angular definitions of Figure 1 , for the 
torques applied to the vehicle, the inertial reaction 
torques of the vehicle, and the kinematics of rotation. 
These expressions are presented next. 



where e. , b. , 1. , n. , denote base vectors 
1 i l i 

0^ denotes an Euler angle 

FIGURE 1 . EULER ANGLES DEFINED WITH 
RESPECT TO QRBITAL DIRECTIONS 

The torque caused by gravity gradient is given by 

T^i = 3 oj>o {(I22 I33) S 2 C 2 S 3 + c\ C 3 S 3 Ij 3 

+ [ S| - C2S3 ] I23 + C2 C3S2 1^2 ) ( 1 ) 

T n2 = 3c °o ((111 ~ I33) s 2 C 2 C 3 + S 2 S 3 C 2 Ii2 

- c| C 3 S3 1 23 + [ C 3 - sf ( i + C| ) ] I 13 } 

( 2 ) 

T^3 = 3 a)j}{ (111 “ I22) S3C3C2 - S2 S 3 C 2 1 x 3 

- S2C2C3I23 + C\[ 2 C\ - 1 ] I12 } 

( 3 ) 
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where 

I.. ^denotes moments of inertia when i = j 

1J \denotes products of inertia when i ^ j 

S.C . denote sin 0 . and cos 0 . , respectively 

T denotes the torque due to gravity 

gradient 

too denotes the angular rate of a circular 
orbit 

The torque caused by aerodynamics is given by 

—aero = ^ I s i c 2 + ( c i c 3 + S 1 S 2 C 3 ) n 3 ] 

77 = 3.162 x 10 6 Nm , (4) 

where 

T denotes aerodynamic torque 

—aero 

r / denotes the numerical constant 

associated with the aerodynamic torque 

The inertial reaction of the vehicle is given by 


The kinematical equations are given by 


W nl 


s t s 3 ~ CiSjCs 

W n 2 

- COq 

SiC 3 + S 2 S 3 

_ w n3_ 


CiC 2 



C2S3 S3 

o’ 


©1 

+ 

- c 2 s, c 3 

0 


©2 


s 2 0 

1 


©3 


The problem was formulated for solution by the 
method of continuous dynamic programing by defin- 
ing a cost function of the form 

T 

v = E V I*, T - X.(T) ] 2 + f(Z \ (\ T - \(^) !* 

+ ^ \ IX P T' X P (<7))2 + ^ V U mT- U m (!T)]2}dCT 


L 


nl 


lil^i + <^llli ” *12^2 “ <^2 Il2 “ ^13^3 
" CO 3 Ii3 “ I31 CO 1 0 > 2 “ I32 CO 2 + 133 CO 2 CO 3 
-K T2I COi CO3 ~ I22 CO 2 CO 3 + I23 CO3 ( 5 ) 


i = i, . . • , 6 
j = a, b, c, 1,2,3 
k - 4, 5, 6 
1 = Cl, e, f 


p - 1, 2, 3 
n - 7, . . . , 12 
m = 1 , . . . , 6 

(9) 


- “ 121 COl “ COx I21 + *22 ^>2 + C 0 2 122 ~ ^23 CO 3 

” CO 3 123 + I31 cof + I32 Cl> 1 Ct>2 “ I33 CO 1 CO 3 

■+ ^11 COl CO3 _ II 2 CO 3 CO 2 “ I13CO3 (6) 

^nS = ” Iji-COi “ COils! " I32 C^2 ~ CO 2 I32 + ^ 33^3 

+ co 3 133 “ I 21 CO 1 + I 22 a?i to 2 - 1 2 3 co 1 co 3 

- IiiO)iu ;2 + Ii 2 col + Ii3 C0 2 ^3 (7) 

where 

L^. denotes the component of torque applied 
to the satellite by external sources 
about the i axis of the n coordinate 
triad 


where 

T (limit on the integral) denotes the end 

of solution period 

T (subscript) denotes a variable's desired 

terminal value 

u denotes a control vector element 

V denotes the cost (i.e. , a number) 

a denotes a dummy variable of integration 

X denotes the cost function weighting 

factor 


co. denotes an angular rate 

and the various inertias in equations (5, 6 , 7) are 
assumed to be time variable. 


In equation (9) the A's are weighting factors by which 
the importance of one term relative to another is 
specified. Damping, and hence transition time, is 
controlled by the first two terms in the integrand. 
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The last term in the integrand guarantees that the 
control vector metric remains finite. 

Numerical solutions were obtained by assuming 
an inertia element control law of the form 


T "lip = -I(t > + u(t > 


( 10 ) 


where 

t denotes time 

r denotes time constant in inertia element 

changing relationship 

and writing all expressions in state notation as given 
in Table I. The state variable definitions as well as 


TABLE I, SATELLITE STATE EQUATIONS 


Dynamics 


Kinematics 


Inertia 

Control 

Law 


*i 

x 2 

x 3 

x 4 

x 5 

x 6 

X? 

X 8 

X9 

x 10 

Xli 

X12 


E t Tn, 

+ 

E 2 Tn 2 

1 , 

Eg Tng 

+ . 

E i e 7 

E 2 Eg 

E 3 E 9 

Ei E io 

E 2 E tl 

E 3 e 12 

D 

D 

T 

D 

T 

Dt 

Dt 

Dt 

D 

D 

D 

E 2 Tnj 

. 4. 

E 4 Tn 2 

+ 

E 5 Tng 

+ a_ 

E 2 E 7 

E 4 E 8 

E 5 E 9 

E 2 E 10 

E 4 Ell 

E5 E j2 

D 


D 


D 

r 

Dt 

Dt 

Dt 

D 

D 

D 

E 3 Til! 

+ 

E 5 Tn 2 

-f 

E e Tn 3 


e 3 e 7 

E 5 E 8 

e 6 E 9 

E 3 E 10 

Eg E X1 

Eg Ej2 

D 


D 


D 

r 

Dt 

Dt 

Dt 

D 

D 

D 

COS Xg 

Xl 

sin 


Swq cos 

x 4 sin x 5 






COS x 5 

cos 

x 5 

-**•2 T 

COS 

x 5 







x 1 sin x 6 + x 2 cos x 6 + 3 sin x 4 


/ sin x 5 cos x 6 
\ cos x 5 


x 7 1 

- 1 + — Mi 
T T 1 


\ / sin x 5 sin x 6 \ 3 u>g cos x 4 

h + \ co’sx, h +X3 - 


A_ 

cos x 5 


x« 1 
+ ~ u 2 


T 


X 9 i 
- — + “ u 3 

T rr O 


Xi° + 1 

T 


+ ~ll 4 
7* nr * 


Xli t i 
— + ~ Ug 
T T 5 

X12 1 

+ - Ug 

r t B 


_ _l 

Associated Definitions 


1 

E ! = Xg X 9 - x| 

E 7 = Uj Xj - u 4 x 2 - u 5 x 3 

E12 = Xg X t X 2 + X 10 X 2 2 + Xu X 2 Xg - Xio xf 

E 2 = X 9 X 10 + X U Xj2 

Eg = - u 4 Xj + U2 X 2 ■- U 6 Xg 

“ XJ2 Xi x 3 - x 7 Xi x 2 


E 3 ■“ Xio Xj 2 + Xg X|i 

Eg = — Ug Xi - U 6 x 2 + U 3 Xg 

D = x 7 Xg Xg - 2 x 10 Xu X^ - 

X* Xj 2 , 

E 4 = X 7 Xg - Xu 

E 10 = Xg x 2 x 3 + X 10 Xi Xg + X 12 Xg 2 

- Xg x | 0 - X 7 x| 


Eg = X 7 X 12 + X 10 x n 

- Xii Xl x 2 - Xig X 2 2 - Xg Xg Xg 

Xi = ^i x 4 -ei x 7 = i u 

0 

II 

K 

II 

Eg= x x Xg - xfo 

E u = x u x| + XJ2 Xi x 2 + x 7 Xi Xg 

X 2 = w 2 Xg = ©2 X % = I 22 

Xu “ 1 13 - hi 


- Xg Xi Xg - X 10 X 2 X 3 - Xu Xg 2 

x 3 = C0 3 Xg«e 3 Xg — Igg 

x it = % = hi 
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ranges of suitable weighting factors are given in 
Table H. 

TABLE II. WEIGHTING FACTOR SUMMARY 


Problem 

Variable 

State 

Variable 

Acceptable Ranges 

Nominal A 
Values 

W 1T 

X 1T 

10 3 < A < 10 5 
a 

1.0 x 10 4 

u> 2X 

X 2T 

ID 3 < A fo < 10 5 

1.0 x io 4 

W 3T 

X 3T 

10 3 < A < 10 5 
c 

1.0 x 10 4 

0 1T 

X 4T 

1» 3 < A, < 10 5 

1. 0 x io 4 

0 2T 

X 5T 

IO 3 < A ? < 10 5 

1.0 X 10 4 

°3T 

X 6T 

10 3 < A;j <. 10 5 

1.0X 10 4 

OjU) 

x 4 U) 
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RESULTS 


A number of computer runs were made to estab- 
lish roughly workable ranges of the weighting factors . 
Although convergence was obtained for a wide range 
of initial conditions, a set of initial conditions corres- 
ponding to a 2 5 -degree initial misalignment in all 
axes, with zero initial angular velocity was used as 
a general case to be investigated. 

The first sets of runs were made with no con- 
straint on the relationship between the inertia tensor 
element values other than insuring desirable initial 
and terminal values and also insuring that the mo - 
ments of inertia remained positive. These runs 
allowed freedom in exploring the computational 


aspects of the problem and were typified by the 
satellite's angular rate and displacement excursions 
shown in Figures 2 and 3. 
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FIGURE 3. EULER ANGLES FOR EASIER CASES 
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Runs were then made placing the constraint on 
the system that the sum of any two eigenvalues of 
the inertia tensor must always exceed, or at most 
equal, the third eigenvalue. Typical results ob- 
tained are shown in Figures 4 and 5. 

As would be expected, the motion was not damped 
as rapidly in Figures 4 and 5 as that in Figures 2 and 3 
because the inertia tensor element changes were not as 
large in Figures 4 and 5 as those in Figures 2 and 3. 

Using the initial results as a yardstick by which 
to judge the results of the more constrained problem, 
it was decided to see if more rapid damping could be 
achieved in the constrained case. The method chosen 
to do this was to time program the X weighting fac- 
tors in the cost function (they previously were 
assumed to be constant) . After some experimenta- 
tion it was found that by reducing the six weighting 
factors of the inertia tensor elements to 20 percent 
of their initial values at 0 . 8 of one hour ( out of a 


two-hour solution period) , measurable improvement 
occurred. Typical results are given in Figures 6 
and 7. 

Clearly, additional improvement could be 
achieved by further tuning of the weighting factors . 


CONCLUSIONS 

The results achieved to date demonstrate the 
feasibility of the inertia changing scheme in achiev- 
ing damped satellite motion. The major unresolved 
problem area, from an analytical viewpoint, is that 
of achieving closed loop control. The results 
achieved so far were obtained from an iterative 
process so that, in the classical sense, only open 
loop control was achieved. Some research on this 
problem has been accomplished but no definitive 
results have been obtained. 
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FIGURE 5. EULER ANGLES FOR THE CONSTRAINED INERTIA CASE WITH CONSTANT COST WEIGHTING FACTORS 
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FIGURE 6. ANGULAR RATES FOR THE CONSTRAINED INERTIA CASE WITH TIME PROGRAMED COST WEIGHTING FACTORS 
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UNITS OF MEASURE 


In a prepared statement presented on August s, 1965, to the 
U. S. House of Representatives Science and Astronautics Committee 
(chaired by George P. Miller of California) , the position of the 
National Aeronautics and Space Administration on Units of Measure 
was stated by Dr. Alfred J. Eggers , Deputy Associate Administrator , 
Office of Advanced Research and Technology: 

"In January of this year NASA directed that the international 
system of units should be considered the preferred system of units, 
and should be employed by the research centers as the primary 
system in all reports and publications of a technical nature, except 
where such use would reduce the usefulness of the report to the 
primary recipients. During the conversion period the use of cus- 
tomary units in parentheses following the SI units is permissible, 
but the parenthetical usage of conventional units will be discontinued 
as soon as it is judged that the normal users of the reports would 
not be particularly inconvenienced by the exclusive use of SI units." 

The International System of Units (SI Units) has been adopted 
by the U. S. National Bureau of Standards (see NBS Technical News 
Bulletin, Vol. 48, No. 4, April 1964). 

The International System of Units is defined in NASA SP-7012, 
"The International System of Units, Physical Constants, and 
Conversion Factors," which is available from the U. S, Government 
Printing Office, Washington, D. C. 20402. 

SI Units are used preferentially in this series of research re- 
ports in accordance with NASA policy and following the practice of 
the National Bureau of Standards. 
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